3 ms·
Inevitably, like everyone who rejects PHP frameworks because "PHP is already a templating language", you just wound up reinventing the framework anyway. I'm no
by krapp 3y ago
Inevitably, like everyone who rejects PHP frameworks because "PHP is already a templating language", you just wound up reinventing the framework anyway.
I'm not complaining - It's just, there's a reason everyone goes for the existing frameworks and it isn't addiction to complexity. Raw PHP code is legendarily insecure and prone to XSS and other issues if you don't do things exactly right.
Nice site, though.
- cowsandmilk 3y ago> prone to XSS and other issues if you don't do things exactly right. Not any more so than sites with frameworks. I’ve found XSS issues in Java Spring framework built sites that didn’t “do things exactly right”. A framework doesn’t magically fix that.
- krapp 3y agoNo one mentioned magic. Frameworks are designed to do what PHP developers wind up implementing in an ad-hoc, haphazard way themselves, and tend to be better at doing it on average. Any code can have security issues but I'd trust a battle-hardened open source PHP framework over some random coder's hubris any day of the week.