midnightstreamer Posted September 7, 2021 Share Posted September 7, 2021 Since we get many tickets asking if we have fixed the XC security flaws we think it's time for a clarification. MidnightStreamer has been programmed from the ground up using the latest CodeIgniter PHP framework. MS and XC have nothing in common apart from the GUI and terminological similarities. However MS, in addition to having its own API, implements the XC API for compatibility reasons. If XC has some security flaws in its streaming engine and admin area, it's NOT a MS problem. Every professional application should be framework based. Frameworks are best practice because they prevent security vulnerabilities on script and database level. We have chosen CodeIgniter because of its lightweightness and scalability. It is not our habit to denigrate the work of others but for the record we must clarify the programming features of the XC core. XC has been programmed in PHP without the use of a framework. This results in an unmaintainable and messy code with trillions of potential security holes. On the other hand, framework-based applications are more reliable and faster to code. We hope to have unraveled the doubts about the differences between MS and XC. 1 Link to comment Share on other sites More sharing options...
Recommended Posts