4 ms·
Don't presume anyone writing PHP is a trainwreck. With PHP7+ you can write modern applications that are perfectly secure, as much as anything you'd write with a
by Mikushi 8y ago
Don't presume anyone writing PHP is a trainwreck. With PHP7+ you can write modern applications that are perfectly secure, as much as anything you'd write with any other scripting language.
- lol768 8y ago> Don't presume anyone writing PHP is a trainwreck. I'm unsure anyone here is disputing this - my original comment said as much: > Can you write secure code in PHP? Absolutely. But it's more effort and easier to get wrong. It's undeniably more work to get right, though. As an example, if I create a new django app "the CSRF middleware is activated by default in the MIDDLEWARE setting" - you're safe by default. I mean, even as a basic DiD measure PHP could use SameSite cookies by default for its sessions - but does it?