there is worse php than wordpress out there. remembering the time i had to administer magento. it was routine, and recommended in the docs, to set permissions to 777. nothing fucking worked or made sense. i can't say what we were paying for it, but i *can* say it was publicly priced at $13k/year for 4 users. i ran it inside a concrete sarcophagus with a 30km exclusion zone, made of severe apparmor (or was it selinux?) constraints and a once a second cron job to chmod -R o-w on directory trees it REALLY REALLY WANTED to 777. i don't recommend magento.
0 Boosts
0 Likes
@davidgerard
My PHP workers are not allowed to write to directories containing static code. Regardless of what the scripts want.
If that makes the application fail, the application is obviously not suitable for my usecase…
@davidgerard I had to look up what "magento" was but wow we need to get the OSHA department for data safety in here
(haha, you see the joke is that OSHA doesn't even have the funding to investigate things that literally get people killed by buzzsaws,,,)
more on magento:
777 ALL THE THINGS: https://reddragdiva.dreamwidth.org/593218.html
representing currency as floats is *fine*: https://github.com/magento/magento2/issues/555
amazing and detailed comment on magento's shitness: https://news.ycombinator.com/item?id=12153768
@davidgerard @0xabad1dea
I built a Magento 1 shop for a customer in 2014†. That thing is a nightmare to work with, it’s like “what if we did Enterprise Overengineering wrong (as a joke)”. Its plugins are even worse. I remember a commercial plugin where I found at least 30 data exposure bugs, including 5 ../ bugs, in one evening.
†I am _still_today_ trying to migrate them to a more modern platform, but that’s a story for another time.
@davidgerard @0xabad1dea
ahaha I just saw that the orange site comment you linked to was written by me
@davidgerard @0xabad1dea "We use a small delta"
On inequalities comparisons too, right?
@davidgerard I was once paid to work on Magento 2. My job was to write a payment plugin so you could use Barclays EPDQ. I went looking for documentation about security best practices, about how to implement checkout plugins, and reference documentation to understand internal functions.
I couldn't find any of it.
I asked some of my more experienced colleagues how they learned how to write Magento plugins without any of these things. The lead developer told me "you just have to read blog posts from other developers".
The whole developer culture around Magento felt like an exclusive club that I didn't want to be in. I was thrilled to leave that job after that experience.
Barclays had sensible documentation for EPDQ though, so I followed all their best practice guidelines as best as I could within the bizarre environment of Magento. I got it working, but I'm not proud of that code at all.
@lexbailey @davidgerard Oh my, Magento...
I could tell you about the time I had to figure out horizontal scaling for a fairly large store site ($5m+ revenue in a day, a few times a year) with no real help, I'm guessing because the only way to horizontally scale at that time was 'pay Magento for official hosting' or something.
I didn't get the same happy vibes I got in Laravel, Drupal, Symfony, etc. in Magento during the couple years I was managing deployments.
@geerlingguy @lexbailey BMJ eventually used a hosting company instead of me doing it, and then got rid of Magento for a Shopify storefront
"and recommended in the docs, to set permissions to 777"
my skin tried to crawl away just now.
This is also how my CS club kids got their webpage on their intranet sandboxed web server "working"
"We can edit it now from anywhere"
(I'm waiting to see if anyone else will hack it, but if no one does I'll do it myself. )
@davidgerard Farrr out! Yeah, never 777 anything. 😵💫
It's morning here. I'll be going on a patching and warning crusade today.
@davidgerard magento gave me impostor syndrome. i nearly gave up development entirely.
@dysfun i remember you suggesting i get into magento because there was work in it
well yes there is, but
![[object Object]](https://media.mas.to/accounts/avatars/109/287/758/133/964/366/original/0f3099c0adfb36a0.png "[object Object]")
@davidgerard @dysfun ooh fresh hell on offer?
@davidgerard Shoulda used Actinic 😈