so, summary phpNuke phpBB are all written by babies,
php GOOD, babies BAD.

Glen Wooldrige’s Blog: Is PHP Insecure? Hell No!…

…

Your comment makes as much sense as…

…

Its a trackback, an automatic notification from a site that has linked to you, usually from a blog.

The reason it looks fucked is because I couldn’t be bothered to style them in this version, but over the holidays I’m going to get stuck into the next one which should be as good as Johnny’s mum.

[...] has pointed out an interesting article written up by Glen “Woolie” Wooldrige titled Is PHP Insecure? Hell No! Its quite a common occurrence to hear that PHP has been described as “Insecure”. You [...]

Though I totally agree with you, that’s it’s more a question of popularity among stupid and/or unexperienced users, php is one of the ugliest and inconsequently developed “languages” there is. It’s a scripting language made for quick hacks. That’s why there are all those f*ckd up method names in one core namespace. Due to its boost of popularity it got pushed to spheres where it shouldnt be.

It’s “out there”, not “out their”. Put knot yore trust in spel chequers.
To Daniel: you completely missed the point. Inconsistent function names and no namespaces have nothing to do with the alleged insecurity of php. You slashdotters will keep pointing it up like it was of any relevance.
gah, I’m angry this morning.

Daniel: Perhaps in the first few versions there were some inconsitancies as originally, PHP was not created as a language. However in the latest version (PHP5) I feel that everything has been ironed out and it is now sailing quite happily. Of course you are entitiled to your opinion, but perhaps you should give it another try?

Elmer: Thanks for noticing that, I have rectified the error. Perhaps you should lay off the coffee?

Thanks for the advice, I’ll try to switch to tea.
Gregory Szorc (I’m not him, I’m just an anonymous coward) pointed out recently http://blog.case.edu/gps10/2007/04/29/so_many_untapped_php_features that there’s about 10 percent php5-ready servers, and suggested there’s probably about as much people using php5 features.
And take a look at php6 (still in early development) - they throw away register_globals, magic quotes etc. Honestly I think this is going to make it a niche language (even more compared to php5), because most of those crappy php* apps just won’t work without a complete rewrite.
I just wonder where will all these low skill developers go.
They will probably still use php4 on old servers, and fill the google results with “php sucks” statements

Ah, they’re finally ditching register_globals. Its about time. I’m surprised they left it in PHP5. Backward compatibility I suppose.

I haven’t looked much into PHP6 yet, I’ve only heard Rasmus talk about it a little in a podcast. I should go take a look.

I totally agree with your article, and by the way; the PHP-license dosn’t allow you to name your projects with “PHP” in it’s name, without a written permission from the PHP-team;

3. The name “PHP” must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact group@php.net.

Thats interesting, I didn’t know that. However, I have heard that that only applies to commercial software created with PHP.

phpNon-Commercial_Sports is still legal then?

i like how you have got a lot of ‘outsiders’ commenting….

Yea there’s been a bit of hype over this article. Have a look at the links below.

• Zend Developer Zone
• PHP Mag
• PHP Developer
• dzone

Very interesting and also entertaining article.

PHP is a very easy language to learn.

We request Woolie’s return!

That’s a very good point. I have noticed in my own code how I have come from writing insanely insecure and buggy code to writing very clean, secure, and scalable code. Of course, for anyone, there is room to grow in that aspect. As for getting rid of all those ‘fix this noobs code’ methods will probably help to weed out a good many of the buggy programs and the coders that shouldn’t be coders. Although, I have to say if it weren’t for PHP, I wouldn’t be a programmer at all considering I learned using PHP - but I never did make use register_globals or magic_quotes. I followed the advice I found on forums that said to turn them off and handle that sort of thing on my own. This really helped when going from server to server by making sure that I wasn’t relying on how someone else decided to set up the server.

…
Hell No!

whys the time not my time? needs to be adjusted to -1hr!

Hmm … even this happens.