3 ms·
A lot of people hate PHP because they don't think it's possible to write secure PHP code. Sometimes companies enshrine this ignorance as official policy, and t
by CiPHPerCoder 7y ago
A lot of people hate PHP because they don't think it's possible to write secure PHP code.
Sometimes companies enshrine this ignorance as official policy, and their knowledge of PHP security is as shallow as "php.ini hardening".
When anyone encounters such ignorance, point them here: https://paragonie.com/blog/2017/12/2018-guide-building-secure-php-software https://paragonie.com/blog/2017/12/2018-guide-building-secur...
Or for more general code quality complaints: https://phptherightway.com https://phptherightway.com
I'm looking forward to PHP 8, and beyond. Mentalities that were only relevant in PHP 5.1 (or earlier) are outmoded and should be laid to rest.
- rvz 7y agoAbsolutely, most of all your points can also be applicable to the same reasons why many programmers complain in their hundreds of thousands about how much they hate C++ due to its footguns and sheer complexity which they assume that they have to literally learn everything in the language and from their bad experiences from C++ 2003. So Rust becomes the most loved alternative to C++ but is also equally just as complex, slightly harder to read, twice as frustrating due to some having bad 'anecdotal' experiences fighting with the borrow checker and a large lack of post-1.0 libraries. Those wanting to "Rewrite it in Rust" from a C++ code base will be quickly disappointed... Perhaps the answer to both the PHP, C++ and Rust issues from programmers is always a reply saying "You'll get used to it"...
- deleted 7y ago[deleted]
- tyingq 7y agoAgreed. Most of the historical PHP security problems are mitigated with practices that are common for any language. Like "use a template DSL", "use SQL bind variables" and "don't let the web server user have write permissions to the docroot".