Poor article. The author only compares FuelPHP to the Zend Framework and bases the whole decision on why it is better with documentation.

It might be because of the iframe which loads a script from http://golden-corps.com. The website is dead so I'm not sure what its there for.

> Too bad Apple patented calling an address book "Address Book,"

Are you joking? I didn't think that was possible, it's too generic and I couldn't find anything on Google regarding the matter.

In the good old days, Microsoft would have called it "Microsoft Address Book", waited a few years, then started suing people for using the term "Address Book". More recently, they'd have called it "My Address Book" and then changed it back to "Address Book" in Vista, breaking applications that expected to find "My Address Book". And the 32-bit version would be in "Program Files x86" because it's really important to segregate applications by their bitness.

Yeah, it was a joke, though maybe too close to the realm of possibility.

There's one thing that annoys me that you missed. People who ask for advice, then disregard any advice that is given.

Here's an interesting tweet from one of their developers.

http://twitter.com/ReinH/status/50348989366796288

> Your password in the database is SHA512 encrypted, but we're not taking chances.

I hope he knows what he's talking about and is just tired from the past few days.

Let's hope they are salted and iterated.

Or swapped over to Bcrypt

we've cleared the old SHA512-salted passwords out of our production database and have upgraded the password hashing to bcrypt, with a cost of 10.

Good call :)

Just in case anyone doesn't know why Bcrypt is so awesome, it's because it actually takes longer to hash (based on the difficulty level you set, and you can bump up the difficulty level as hardware gets more powerful).

For other applications, you want hashing to be fast. But for passwords, you want hashing to be as slow as possible without compromising user experience.

I wanted Lucas to link to Coda Hale's post on bcrypt (found by googling "Coda Hale bcrypt") in the blog post, but he edited that out. So it goes.