PHP Utilization

[garfitz]

Hi,

I have a couple of questions surrounding the utilization of PHP as I know your platform uses it and our security teams have asked us questions:

What version of PHP are you using?

Do you know if we have any dependencies on your PHP and are they using a different version of it?

[James]

@garfitz 

What application are you asking about?

As far as I know, Canvas doesn't use PHP. They use Ruby. They deliver JavaScript to the browsers. They write tools using Node. They use various libraries and frameworks, but I've never seen anything from Canvas that uses PHP.

End-users and developers might use PHP to access the Canvas API, but that's not a question that Canvas can answer.

Even if Canvas were using PHP, it would be as a server technology and you don't install anything on your end. Canvas runs in the browser. There can be no PHP dependencies on your end since you don't install anything on your local machine.

So, if you're not asking about Canvas, who is this question directed to?

[garfitz]

Thanks for the response, it is for Canvas, but I also asked the support team this question, they said that they do. So at a minimum I need to know the version for my security team. 

[James]

In that case, I'll let support answer the question. It would be interesting to hear what they have to say.

A search of their main GitHub repository didn't show any PHP code, but there were several places that they had tests that were using PHP. They also had a swagger-codegen that it looks like they might have been playing around with at some point (it's 895 commits behind the master and still refers to PHP 5). I still doubt that's used on their forward-facing servers -- but I've been wrong before.