> We all deep down know that PHP is insecure
Do we? This was certainly true years ago. But I haven't really thought that modern PHP was any worse than any other scripting language.
Do we? This was certainly true years ago. But I haven't really thought that modern PHP was any worse than any other scripting language.
Coincidentally a website for one of my hobbies was throwing stack trace one day and I was surprised to see it was using Slim.
- The exploit video had an anime girl in it
If you compare it with production languages, PHP looks pretty weak.
8f your comparison excludes all the vulnerabilities they come with, sure.
In practice no one using Node is using it without npm. Same for every other language that has insane transitive dependencies for any non-trivial project.
PHP is no more vulnerable than those languages.
In theory, perhaps not. In practice, much more vulnerable.
PHP applications might do suspicious things, by choice. But the runtime itself is fine. Certainly, there are less vulnerabilities in recent years in the PHP runtime than in, say, V8.