4 ms·
There used to be bad defaults, such as "magic quotes" and "register globals". Register globals was turned off in later versions of PHP 4. Magic quotes was turn
by heurisko 5y ago
There used to be bad defaults, such as "magic quotes" and "register globals".
Register globals was turned off in later versions of PHP 4. Magic quotes was turned off in PHP 7, released in 2015.
PHP today is no more "unsecure by default" than any other language.