4 ms·
> It used to be true, and was a valid criticism. It hasn't been true in so long, that claiming so says more about the claimer than the language. Not saying tha
by muldvarp 6y ago
> It used to be true, and was a valid criticism. It hasn't been true in so long, that claiming so says more about the claimer than the language.
Not saying that you are wrong here, but what insecure-by-default parts of the language have been changed since PHP 5?
- solraph 6y agoPrincipally, the Register Globals change that turned every POST & GET entry into a variable was removed entirely in PHP 5.4 (1st of March, 2012), and the was old Mysql API was removed in PHP 7.0 (3rd of December, 2015).