3 ms·
It's not that it's secured with PHP, it's that it's not secured properly. Given the scale of this screw-up, there's nothing tying it to PHP, and it could've be
by ascagnel_ 5y ago
It's not that it's secured with PHP, it's that it's not secured properly. Given the scale of this screw-up, there's nothing tying it to PHP, and it could've been done in the HN language/platform du jour.
- pkulak 5y agoMaybe it's not the language, maybe it's all correlation and no causation, but software that happens to have been written in PHP does not have a stellar security track record. My logs don't fill up with lines like: HTTP POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php for no reason whatsoever.