News for hackers. Stuff that matters.

A comment on What does it take to run a web app with 5K – 10K users?. Parent comment

Re:What does it take to run a web app with 5K – 10K users? by ShinyCyril on Friday January 09, 2015 @11:23AM (#8862856)
> Rails should take care of most of this for you

I often found myself falling into the "I'm not using PHP, so I don't have to worry about any security holes" trap. CSRF is something you really need to watch out for if you are constructing forms manually!

[ Parent | on HN ]
Re:What does it take to run a web app with 5K – 10K users? by oafitupa on Friday January 09, 2015 @11:42AM (#8862966)
And while you are bashing PHP, actual professionals use it all the time and don't fall for those noob mistakes. Learn some Symfony2.
[ Parent | on HN ]
Re:What does it take to run a web app with 5K – 10K users? by ShinyCyril on Friday January 09, 2015 @08:38PM (#8865511)
No bashing intended. I started off writing bad applications in plain PHP that were full of security holes, and moved on to writing better applications in Python with the help of frameworks - at the time I didn't realise there were helper frameworks for PHP too and thought Python was infallible.
[ Parent | on HN ]
Re:What does it take to run a web app with 5K – 10K users? by hackerboos on Friday January 09, 2015 @04:06PM (#8864509)
Giving OP benefit of the doubt I think s/he meant to say "When I'm not using a framework."
[ Parent | on HN ]
Re:What does it take to run a web app with 5K – 10K users? by briandear on Friday January 09, 2015 @01:01PM (#8863360)
No need to construct forms manually, Rails form helpers take care of authenticity tokens automatically.
[ Parent | on HN ]
Re:What does it take to run a web app with 5K – 10K users? by ShinyCyril on Friday January 09, 2015 @08:36PM (#8865502)
I use Python myself and had this problem until I discovered WTForms.
[ Parent | on HN ]