I think the fundamental question is how easy it is to shoot yourself in the foot without having any clue as to what you are doing wrong.. Comparing PHP to C is

I think the fundamental question is how easy it is to shoot yourself in the foot without having any clue as to what you are doing wrong.. Comparing PHP to C is somewhat of a bad comparison since C is famous for security gotchas. If you are comparing PHP to C security-wise.... What's the comparison? All the security of C with all the performance of a scripting language? Now, the core language in PHP is a lot better than it used to be but in the extensions you still see all kinds of braindead behavior like implicit (yet both global and anonymous) database connections and the like. Since so much of PHP is in extension-land this is somewhat troubling.