[development] php4

Sohodojo Jim salmons at sohodojo.com
Mon Jun 14 20:47:37 UTC 2010


In addition to all the other rationales already posted, consider this if
this project involves any kind of eCommerce...

If you develop a web site that does credit card transactions and it is found
to be in violation of PCI industry standards for security, liability in the
event of identity theft can be so high that it could bankrupt a business or
end a business career. Lawyers have a way of "casting a wide net" when
looking for pockets to dip into when a breach like this occurs. Saying "But
my host only supports PHP4" is no more effective than the old "The dog ate
my homework" excuse.

IOW, think of your own liability here in addition to your prospective
client's. Some projects are too risky to do no matter how much you want or
need the business.

	--Sohodojo Jim--

> On Jun 14, 2010, at 12:09 PM, Domenic Santangelo wrote:
> 
> > Hypothetically, if a client wanted you to build a Drupal site
> (complexity of say, 2, where 10 is economist.com) and they insisted on a
> specific host -- and this host only supports php4, what would you tell
> them? So far I've got,
> >
> > -Core will work but many contribs will not (filefield, date, ubercart,
> etc)
> > -Prepare for added development time that you wouldn't have to otherwise
> pay for
> > -???
> >
> > What would you say, hypothetically? Any official stance on php4 from
> d.o?
> >
> > Thanks,
> > -D



More information about the development mailing list