Posted by Jay Paulson on 08/24/05 16:39

>> I'm betting you'll have the SAME ISSUE, and that the problem has
>> NOTHING to do with PHP whatsoever.
>
> And you'd win that bet. I thought that would be the proof I'd need to
> show that it wasn't PHP, but management has some notion that PHP might
> have somehow tainted IIS.

Gotta love a management group that doesn't listen to their IT guys and
think they know the answer to all the IT problems even though they have
no clue about IT. I've been there done that and guess what? I'm still
doing it to this day. I think it's one of those never ending things.
What you should do is configure IIS to parse PHP with .asp extensions
and just tell them that it's ASP. Now that would be funny!

>> PHP works fine with IIS and Windows.
>
> I've tried to tell the that there are Fortune 500 companies running
> PHP on Windows and IIS (there are, right?).

Target, Tickmaster, Yahoo, Amazon, and the list goes on and on.

>> I'll say it again: There is *NOTHING* wrong with PHP and IIS.
>
> I agree. Unfortunately, I have to prove that to them before they'll
> look elsewhere for the problem. Ugh.

Sounds like to me you are getting to the point where you just need to
slap them! ;-)

>> In fact, you could probably get ahold of a Padcom and prove it to
>> yourself in a days' work, and then get them to agree that if it's not
>> PHP nor your script that's broken, but Windows+IIS, then maybe they
>> should just leave the WORKING stuff alone.
>>
>> Probably won't work.
>>
>> But that's how office politics work.
>
> Exactly what I'm finding out.

Or you could leave IIS on the Windows machine and install Apache on the
same Windows box and run PHP using Apache on Windows and see if that
solves your problem. Then of course don't tell management that you are
running Apache! ;-)

On a serious note something that might change their mind (this is what
I did). Go do some research about real stories of companies dealing
with Windows+IIS and the hard ships they have encountered and why they
switched to something else. I'm sure getting stats on how many more
times you are likely to get hack attempts with a Windows+IIS vs. an
Linux+Apache is out there some where. I'm sure that's a pretty
startling surprise. If management cares at all about security and the
up time of their applications etc then they won't be able to ignore
facts that have already happened.

Then again I've pointed out security flaws in code and server setup at
a company I work for in which their computer security, if broken into,
could cost the business to go under and what have they done? Nothing.
When did I point this out to them? 8 months ago. Do I continue to bug
them and show them what kind of damage I can do to their organization?
Yep. Do they know because of this they could lose millions of dollars
and lose high profile contracts? Yep. Do they listen and do anything
about it? Nope. *shrug* There's only so much you can do with people
who have a one track mind and refuse to see what you are showing them.

Anyway, sorry for the tangent! Good luck convincing management!

[Back to original message]