Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>Also, should I stop using LAMP stack for my small and experimental PHP websites that very few people visit, or is it good enough?

It's plenty good enough; it's worked for decades already. If it ain't broke don't fix it. If traffic on a site is ramping up to the point where you're thinking "I might need to get new hardware for this soon", that's the time to start looking at a higher-performance webserver.

And honestly I'd look at moving away from PHP more urgently than moving away from Apache, if only because of their respective security records.



> I'd look at moving away from PHP more urgently than moving away from Apache, if only because of their respective security records.

In my opinion, this is like moving away from C due to its security record.


What, a good idea?


Well, you did also say "If it ain't broke don't fix it", so we might be agreeing. You wouldn't want any new programming language to roll its own SSL library rather than using OpenSSL or GnuTLS, would you?


I wouldn't want a project to write its own SSL library no, but I would not start a new project in C, and if I had an existing C codebase I would seriously think about migrating it to a safer language (unless it needed particular C features. Crypto code does, because it needs to resist timing attacks, but that's a very rare case).


Really? It's a heck of a lot easier to migrate your web server than to re-write your entire codebase in another language.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: