Technology

58055 readers

4766 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

How is the security level of PHP in 2023? (lemm.ee)

submitted 11 months ago* (last edited 11 months ago) by redballooon@lemm.ee to c/technology@lemmy.world

23 comments fedilink hide all child comments

In the early 2000s, everyone in my bubble knew that PHP was a security nightmare, only seconded by Flash. In the meantime, Adobe gave up on Flash, but PHP is still alive and rocking.

How did that happen? Did PHP get some serious makeover? Do developers just not care?

you are viewing a single comment's thread
view the rest of the comments

[–] Vlyn@lemmy.zip 15 points 11 months ago (1 children)

The only real scripting language which doesn’t need any server software configured is PHP

I mean you still need to configure the webserver to handle PHP (Apache, Nginx, or whatever). It's not active by default.

But of course for a webhoster that's really easy at least.

[–] bus_factor@lemmy.world 1 points 11 months ago

Sure, I guess I should have phrased that as "any additional server software beyond the webserver itself", but it's kind of a mouthful. And people would still get after me in the comments, because actually, that's technically true for CGI as well, although the poor performance makes it a no-go for anyone doing anything commercially.