[nycbug-talk] Searching for suspect PHP files...

[Hans Zaunere]

>     ak> php websites nowadays are number
>     ak> one on the crackers' list.
> 
> yeah, to my memory, PHP has been a security disaster since revision 1
> in the late 90's.
> 
> I'm not sure if it's the language itself, or the fact that it attracts
> idiots like Visual BASIC.  I think it's the language itself.  I think
> I'm becoming stupider by writing it.

Sorry, I can't live with this one...

http://www.nyphp.org/content/presentations/ 

Search for Coding secure

There's also a corresponding article coming out in April that provides a lot
more detail.

H