( handler | 2013. 10. 21., h – 19:44 )

Ne keverjuk a nyelvet es a nyelv implementaciojat. Nincs mindenki megelegedve a php zend fele implementacijaval,
igy aztan tobb kevesebb sikerrel szuletnek mas implementaciok is.

Harom nepszerubb, open source implementacio (java, c#, c++):
http://quercus.caucho.com/
http://www.php-compiler.net/
http://www.hiphop-php.com/

Es lass csodat, a php (quercus) elerheto java application serveren.

A php alapvetoen allapot nelkuli mukodesre lett kitalalva, annak minden elonyevel es minden hatranyaval. Hatranybol van rengeteg, ezt mar kifejtettetek, de belso allapot hianya erdekes dolgokra ad lehetoseget.

pl.: az allapotok rogzitesevel, majd a vegrehajtasi grafok osszehasonlitasaval lehetoseg van exploit detektalasra, sot a multban tortent biztonsagi incidensek elemzesere is ...

Taesoo Kim, Ramesh Chandra, Nickolai Zeldovich: Efficient patch-based auditing for web application vulnerabilities [1]

"This paper presented POIROT, a system that can audit
past requests in a web application for exploits of a newly
patched security vulnerability. POIROT incorporates three
techniques—control flow filtering, function-level auditing,
and memoized re-execution—to significantly speed up
auditing compared to previous systems that audit through
re-execution. POIROT is effective at detecting exploits of
real vulnerabilities in MediaWiki and HotCRP. POIROT’s
optimizations allow it to audit challenging patches, which
affect every request, 12–51× faster than the original exe-
cution time of those requests."

[1] https://www.usenix.org/system/files/conference/osdi12/osdi12-final-147…