Re:WordPress on .NET
by nbevans on Tuesday February 28, 2017 @08:58AM
(#13753750)
Running PHP and indeed WordPress on the .NET CLR seems like a great way to eliminate a whole tranche of bugs/vulnerabilities in one swoop. Respect.
[ Parent
| on HN ]
Re:WordPress on .NET
by tannhaeuser on Tuesday February 28, 2017 @12:16PM
(#13755379)
How so? A PHP runtime running WP on .NET needs to be bug-for-bug compatible with the real thing (and I've heard early PHP APIs aren't exactly a paragon of API design).
Also, why would php-on-net be updated more often than one of the most used runtimes on the web?
If only the .NET version would use proper security (no permissioner to modify files, sandboxed plugins, ....) then yes. But that would be a rewrite.
Otherwise the .NET version only remedies vulnerabilities in php and not those in WordPress or its plugins.
Re:WordPress on .NET
by jakubmisek on Tuesday February 28, 2017 @09:15AM
(#13753861)
True, I've been noted, for example, about issues with openssl library, which is updated with every update of PHP ... while Peachpie uses the one provided within .NET which might be more frequently updated by Windows Update.