News for hackers. Stuff that matters.

A comment on Ask HN: What's your favorite way of getting a web app up quickly in 2018?. Parent comment

Re:Ask HN: What's your favorite way of getting a web app up ... by Mikushi on Sunday June 03, 2018 @12:31PM (#17220317)
Don't presume anyone writing PHP is a trainwreck. With PHP7+ you can write modern applications that are perfectly secure, as much as anything you'd write with any other scripting language.
[ Parent | on HN ]
Re:Ask HN: What's your favorite way of getting a web app up ... by lol768 on Sunday June 03, 2018 @04:35PM (#17221721)
> Don't presume anyone writing PHP is a trainwreck.

I'm unsure anyone here is disputing this - my original comment said as much:

> Can you write secure code in PHP? Absolutely. But it's more effort and easier to get wrong.

It's undeniably more work to get right, though. As an example, if I create a new django app "the CSRF middleware is activated by default in the MIDDLEWARE setting" - you're safe by default.

I mean, even as a basic DiD measure PHP could use SameSite cookies by default for its sessions - but does it?

[ Parent | on HN ]