Safe PHP a Contradiction in Terms
 

Whilst browsing I came across this recent article.
I wonder what the PHP users of this forum think ?

Safe PHP a Contradiction in Terms ?
http://www.viruslist.com/en/weblog?d...40463&return=1

Re: Safe PHP a Contradiction in Terms
 

So, the programmer who wrote the script made it include any file in the supplied parameter (local or remote) and hence execute it - basically allowing anyone to run anything on the server :eek: - anyone who does such a stupid thing should never be allowed near code near again. :dozey:

Re: Safe PHP a Contradiction in Terms
 

What an idiot... Almost as bad as

or something along those lines

Re: Safe PHP a Contradiction in Terms
 

What a load of BS.
ASP is more dangerous IMO (and in my experience) because "it just works" - just like those wireless routers that you can buy in the shops with the least secure settings already preset.

A proper programmer would know how to secure it.

That article is totally redundant.

Re: Safe PHP a Contradiction in Terms
 

Just goes to show that ANY language can be dangerous..

Re: Safe PHP a Contradiction in Terms
 

I guess you lot pass the test then.

The comments above are more or less what I expected,and mirror my own point of view that it was careless/negligent programming that resulted in the hack.

Re: Safe PHP a Contradiction in Terms
 

Any language is as dangereous it just depends on who codes it. ASP can be secure php can be secure if the coder does not know how to do this then its poor programming... IMHO

Re: Safe PHP a Contradiction in Terms
 

That's not bad per se because it can be an easy way for remote admin of a machine, it's just if you do use it you need to be sure of securing it.