php may have done the funniest thing possible https://circumstances.run/@davidgerard/117480939434428934
just theorycrafting a little here, from it being uhh fucking unhinged to sit on the RCE vulnerability that broke every install of your software all at once for 2 years until some crypto scammer leaked an exploit for it, because the fix was just too complicated to be worth it
so instead they did 13kloc while everything was on fire
then again, the LLM-free answer might be even funnier: https://social.noyu.me/@hikari/statuses/01M5FM0J5GRG1Z5BDGKR6VE2DC
instead of gradually fixing this issue when it was first reported, they had to do a megapatch
no I uh won’t stop commentating on this by the way
the admins dealing with this have my sympathy (yo @davidgerard @froztbyte how’s hell week going)
it’s fucking ridiculous that php wormed its way into polite company as an allegedly modern language
there’s reasons for that! everything else either sucks at templating or is someone’s toy static site generator, and that’s something to fix (look at my other thread for this)
but no I won’t shut up, not after getting talked down to for not liking php
I wonder if their statement that this was too complicated to be worth fixing when they found out about it in 2024(!) is perhaps also due to some shit a chatbot said