Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #84159

Re: What killed Smalltalk could kill Python

References <54bfd513$0$12978$c3e8da3$5496439d@news.astraweb.com> <m9ou2h$jvj$1@reader1.panix.com> <CAPTjJmrOhgchuF4idomzMzzpZx7pq5-13HNqJ96T+NSVGhdA+g@mail.gmail.com> <54C033F5.6080405@cajuntechie.org>
Date 2015-01-22 10:41 +1100
Subject Re: What killed Smalltalk could kill Python
From Chris Angelico <rosuav@gmail.com>
Newsgroups comp.lang.python
Message-ID <mailman.17931.1421884057.18130.python-list@python.org> (permalink)

Show all headers | View raw


On Thu, Jan 22, 2015 at 10:19 AM, Anthony Papillion
<anthony@cajuntechie.org> wrote:
> To be fair, PHP has come a long way in the last few years and, I hear,
> there's movements within the community to make it better. Namespaces
> were a bit deal as were a few other things. Personally, while I am
> LOVING Python, I'd be sad to see PHP die. It's got a lot of potential if
> the community can get its crap together and take off the ruby coloured
> glasses.

The huge advantage of PHP over other languages is that it comes free
with any cheap web host. That's also a huge *dis*advantage when it
comes to "movements... to make it better", because you can't know when
the new version will become sufficiently prevalent to depend on it.
I've seen PHP 4 compatibility code in current versions of some big
frameworks, although I've no idea whether that implies actual support
or just that nobody's removed it yet.

But there are a few fundamental problems with PHP, which are derived
directly from its philosophies. One of them is that any file in some
directory tree is automatically an entry point - specifically, an
*executable* entry point. PHP frameworks that accept file uploads have
to go to great lengths to ensure that malicious users can't upload
code and run it. Every web framework I've seen for Python, Ruby, Pike,
etc, has URL routing defined by the application, not the file system,
and if you define a readable uploads directory, all you're going to do
is allow people to re-download the same file. Even old CGI scripts,
where file system presence defined entry points, weren't as bad as PHP
- firstly because they were usually restricted to /cgi-bin/ (and you
simply wouldn't allow world writing to that directory), and secondly
because the scripts had to be marked executable, which PHP scripts
don't.

Maybe PHP will grow true Unicode support in a future version. Maybe
it'll gain a nice object model that compares well to Python's or
Ruby's or whichever other you want to look at. Maybe there'll be a
complete reworking of string comparisons so that "12e2" is no longer
equal to "1200". But I doubt it'll ever shift away from file-system
entry points.

And that's why I will continue to push people to Python+Flask rather than PHP.

ChrisA

Back to comp.lang.python | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

What killed Smalltalk could kill Python Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2015-01-22 03:34 +1100
  Re: What killed Smalltalk could kill Python Michiel Overtoom <motoom@xs4all.nl> - 2015-01-21 18:45 +0100
  Re: What killed Smalltalk could kill Python Tim Chase <python.list@tim.thechases.com> - 2015-01-21 12:21 -0600
    Re: What killed Smalltalk could kill Python albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-02-07 23:35 +0000
  Re: What killed Smalltalk could kill Python Grant Edwards <invalid@invalid.invalid> - 2015-01-21 19:18 +0000
    Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 09:35 +1100
      Re: What killed Smalltalk could kill Python Grant Edwards <invalid@invalid.invalid> - 2015-01-21 23:10 +0000
        Re: What killed Smalltalk could kill Python Marko Rauhamaa <marko@pacujo.net> - 2015-01-22 02:25 +0200
        Re: What killed Smalltalk could kill Python Tim Chase <python.list@tim.thechases.com> - 2015-01-21 21:22 -0600
          Re: What killed Smalltalk could kill Python Grant Edwards <invalid@invalid.invalid> - 2015-01-22 17:52 +0000
    Re: What killed Smalltalk could kill Python Anthony Papillion <anthony@cajuntechie.org> - 2015-01-21 17:19 -0600
    Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 10:41 +1100
    Re: What killed Smalltalk could kill Python John Ladasky <john_ladasky@sbcglobal.net> - 2015-01-21 16:22 -0800
  Re: What killed Smalltalk could kill Python Tim Daneliuk <tundra@tundraware.com> - 2015-01-21 17:37 -0600
    Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 10:55 +1100
      Re: What killed Smalltalk could kill Python Tim Daneliuk <tundra@tundraware.com> - 2015-01-23 16:51 -0600
        Re: What killed Smalltalk could kill Python Bob Martin <bob.martin@excite.com> - 2015-01-24 08:09 +0000
          Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-24 19:16 +1100
            Re: What killed Smalltalk could kill Python Bob Martin <bob.martin@excite.com> - 2015-01-24 14:09 +0000
          Re: What killed Smalltalk could kill Python Gene Heskett <gheskett@wdtv.com> - 2015-01-24 06:34 -0500
            Re: What killed Smalltalk could kill Python Bob Martin <bob.martin@excite.com> - 2015-01-24 14:14 +0000
      Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-24 09:57 +1100
        Re: What killed Smalltalk could kill Python Tim Daneliuk <tundra@tundraware.com> - 2015-01-26 14:18 -0600
      Re: What killed Smalltalk could kill Python Tim Daneliuk <tundra@tundraware.com> - 2015-01-23 16:51 -0600
    Re: What killed Smalltalk could kill Python Michael Torrie <torriem@gmail.com> - 2015-01-21 17:08 -0700
    Re: What killed Smalltalk could kill Python Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2015-01-21 21:59 -0500
    Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 14:08 +1100
    Re: What killed Smalltalk could kill Python Emil Oppeln-Bronikowski <emil@fuse.pl> - 2015-01-22 05:46 +0100
    Re: What killed Smalltalk could kill Python Ethan Furman <ethan@stoneleaf.us> - 2015-02-09 13:28 -0800
  Re: What killed Smalltalk could kill Python Paul Rubin <no.email@nospam.invalid> - 2015-01-21 15:46 -0800
    Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 10:57 +1100
      Re: What killed Smalltalk could kill Python Mario Figueiredo <marfig@gmail.com> - 2015-01-22 01:09 +0100
        Re: What killed Smalltalk could kill Python sohcahtoa82@gmail.com - 2015-01-21 17:00 -0800
        Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 12:36 +1100
        Re: What killed Smalltalk could kill Python Paul Rubin <no.email@nospam.invalid> - 2015-01-21 17:38 -0800
          Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 12:45 +1100
            Re: What killed Smalltalk could kill Python Paul Rubin <no.email@nospam.invalid> - 2015-01-21 18:53 -0800
              Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 13:59 +1100
                Re: What killed Smalltalk could kill Python albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-02-07 23:54 +0000
                Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-02-08 11:57 +1100
                Re: What killed Smalltalk could kill Python Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2015-02-08 18:59 +1100
                Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-02-08 19:24 +1100
            Re: What killed Smalltalk could kill Python alex23 <wuwei23@gmail.com> - 2015-01-23 15:35 +1000
              Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-23 17:07 +1100
        Re: What killed Smalltalk could kill Python Ethan Furman <ethan@stoneleaf.us> - 2015-01-21 17:44 -0800
        Re: What killed Smalltalk could kill Python Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2015-01-22 14:23 +1100
          Re: What killed Smalltalk could kill Python Chris Angelico <rosuav@gmail.com> - 2015-01-22 15:34 +1100
          Re: What killed Smalltalk could kill Python alex23 <wuwei23@gmail.com> - 2015-01-23 15:39 +1000
            Re: What killed Smalltalk could kill Python sohcahtoa82@gmail.com - 2015-01-23 14:48 -0800
              Re: What killed Smalltalk could kill Python Emile van Sebille <emile@fenx.com> - 2015-01-23 14:58 -0800
    Re: What killed Smalltalk could kill Python Mario Figueiredo <marfig@gmail.com> - 2015-01-22 01:16 +0100
      Re: What killed Smalltalk could kill Python Terry Reedy <tjreedy@udel.edu> - 2015-01-22 00:45 -0500
  Re: What killed Smalltalk could kill Python Rick Johnson <rantingrickjohnson@gmail.com> - 2015-01-21 18:11 -0800
    Re: What killed Smalltalk could kill Python Mark Lawrence <breamoreboy@yahoo.co.uk> - 2015-01-22 06:30 +0000
  Re: What killed Smalltalk could kill Python Gene Heskett <gheskett@wdtv.com> - 2015-01-22 07:26 -0500
  Re: What killed Smalltalk could kill Python Emil Oppeln-Bronikowski <emil@fuse.pl> - 2015-01-22 16:47 +0100
  Re: What killed Smalltalk could kill Python Tony the Tiger <tony@tiger.invalid> - 2015-01-23 18:04 +0000

csiph-web