Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:125637
Precedence: bulk
MIME-Version: 1.0
References: <A247BB36-9FD1-4AAF-AAB8-82DBD9DE3550@newclarity.net>
 <CA697780-BC2D-4054-A9FD-523E08236732@rwec.co.uk> <8D420123-4ECF-48FD-A9C3-F80C60457A37@newclarity.net>
 <CA+Jpajkx0OraH7GQyB5gECtPOo2JP=RzuSwqfv4AZGY+a+ryPw@mail.gmail.com>
 <AACF228F-53D3-480F-9127-77FBC4AE6A84@newclarity.net> <CAGnYymDhy1dov+4HcFWhAx1Ga9bXR=Urew9RbN5KEXcgHmk=Ew@mail.gmail.com>
 <f433fbe1-bee4-4a61-ba18-90053975b29e@app.fastmail.com> <BB0310CD-8134-4B3F-9C51-B59B5A24405F@automattic.com>
 <CA+Jpajnk9i=EhqXaKnYUTHhA_1TfzB1qiLfRh1whPoO8Y8ECqA@mail.gmail.com> <7EA884D2-0F37-4BF1-AC97-DB6953C944E6@automattic.com>
In-Reply-To: <7EA884D2-0F37-4BF1-AC97-DB6953C944E6@automattic.com>
Date: Fri, 20 Sep 2024 10:56:38 +0300
Message-ID: <CAL0xaBHKUxwbzAYaPHevLSAEvWOQRPLsraxEg3oQtJ=wTxAkiw@mail.gmail.com>
Subject: Re: [PHP-DEV] Zephir, and other tangents
To: Dennis Snell <dennis.snell@automattic.com>
Cc: Hammed Ajao <hamiegold@gmail.com>, Rob Landers <rob@bottled.codes>, 
	Adam Zielinski <adam.zielinski@automattic.com>, Mike Schinkel <mike@newclarity.net>, 
	PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="0000000000002a7735062288631b"
From: arvids.godjuks@gmail.com (Arvids Godjuks)

--0000000000002a7735062288631b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 20 Sept 2024 at 09:17, Dennis Snell <dennis.snell@automattic.com>
wrote:

> Hi Hammed, thank you for taking the time to read through this and share
> your thoughts.
>
> snip
>
>
>
> Cheers,
> Hammed
>
>
> Hope you have a nice weekend. Cheers.
>

Hello everyone,

I want to chip in here, since reading the thread lead me into a state of
cognitive dissonance.
I've been in PHP world for a long time, about 3 years shy of how old
Wordpress is. When I'm reading "shared hosting" and "WASM" and knowing how
managed hosting works, I have to ask: What type of la-la land is this
conversation is taking place in?
All managed wordpess hosting is locked down hard. Extensions are very
limited and everything that allows any type of freedom is disabled,
functions are disabled en mass. I have to ask: knowing the history of past
27 years, what managed hoster in their right mind and sanity will allow
WASM to be enabled to bypass ____A L L _____ PHP security features and
allow PHP code do anything it wants? On a shared hosting... I seriously
want to know answer to this question, because I firmly believe there was
zero risk and security assessment not only done, but it hasn't been even a
twinkle in the eye.

On VPS/Decicated you can run whatever you want, so you don't have the
limitations.

On other note - people have pointed out how big body of work it is. If you
want to sponsor WASM development for PHP, I suggest Automatic open their
wallet and put in 2-3 million $ a year for the next 5-10 years to
PHPFoundation and find devs who are capable and willing to do this job.
Honestly, I think you might find people to want to do that rather than lack
of money being the cause of it.

--=20

Arv=C4=ABds Godjuks
+371 26 851 664
arvids.godjuks@gmail.com
Telegram: @psihius https://t.me/psihius

--0000000000002a7735062288631b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Fri, 20 Sept 2024 at 09:17, Dennis Sne=
ll &lt;<a href=3D"mailto:dennis.snell@automattic.com">dennis.snell@automatt=
ic.com</a>&gt; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex"><div class=3D"msg-7163692151126893705"><u>=
</u>





<div>
<div>Hi Hammed, thank you for taking the time to read through this and shar=
e your thoughts.</div>
<div><br></div>
<blockquote type=3D"cite">
<div>snip</div></blockquote>
<div><br></div>
<blockquote type=3D"cite">
<div dir=3D"ltr" style=3D"font-family:-webkit-standard;font-variant-caps:no=
rmal;font-weight:400;text-decoration:none"><div class=3D"gmail_quote">
<div>
<br>Cheers,</div>
<div>Hammed</div>
</div></div>
</blockquote>
<div><br></div>
<div>Hope you have a nice weekend. Cheers.</div>
</div>
</div></blockquote></div><div><br></div>Hello everyone,<div><br></div><div>=
I want to chip in here, since reading the thread lead me into a state of co=
gnitive dissonance.</div><div>I&#39;ve been in PHP world for a long=C2=A0ti=
me, about 3 years shy of how old Wordpress is. When I&#39;m reading &quot;s=
hared hosting&quot; and &quot;WASM&quot; and knowing how managed hosting wo=
rks, I have to ask: What type of la-la land is this conversation is taking =
place in?</div><div>All managed wordpess hosting is locked down hard. Exten=
sions are very limited and everything that allows any type of freedom is di=
sabled, functions are disabled en mass. I have to ask: knowing the history =
of past 27 years, what managed hoster in their right mind and sanity will a=
llow WASM to be enabled=C2=A0to bypass ____A L L _____ PHP security feature=
s and allow PHP code do anything it wants? On a shared hosting... I serious=
ly want to know answer to this question, because I firmly believe there was=
 zero risk and security assessment not only done, but it hasn&#39;t been ev=
en a twinkle in the eye.</div><div><br></div><div>On VPS/Decicated you can =
run whatever you want, so you don&#39;t have the limitations.</div><div><br=
></div><div>On other note - people have pointed out how big body of work it=
 is. If you want to sponsor WASM development for PHP, I suggest Automatic o=
pen their wallet and put in 2-3 million $ a year for the next 5-10 years to=
 PHPFoundation and find devs who are capable and willing to do this job. Ho=
nestly, I think you might find people to want to do that rather than lack o=
f money being the cause of it.</div><div><div><br></div><span class=3D"gmai=
l_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature=
"><div dir=3D"ltr"><div><br></div>Arv=C4=ABds Godjuks<div>+371 26 851 664</=
div><div><a href=3D"mailto:arvids.godjuks@gmail.com" target=3D"_blank">arvi=
ds.godjuks@gmail.com</a></div><div>Telegram: @psihius=C2=A0<a href=3D"https=
://t.me/psihius" target=3D"_blank">https://t.me/psihius</a></div></div></di=
v></div></div>

--0000000000002a7735062288631b--