News for hackers. Stuff that matters.

A comment on A reboot of PHP: keep the philosophy, improve the syntax with the jvm. Parent comment

Re:A reboot of PHP: keep the philosophy, improve the syntax ... by remi_forax on Monday October 10, 2011 @02:55AM (#3092543)
No, unlike PHP, PHP.reboot is secure by default. That's why PHP.reboot use DSLs, because it enables the runtime to know the context thus sanitize the inputs by itself.

Rémi

[ Parent | on HN ]
Re:A reboot of PHP: keep the philosophy, improve the syntax ... by stephenr on Monday October 10, 2011 @08:29PM (#3096522)
Apologies for the typos - I posted from a phone.

As for "Secure by default". PHP can be perfectly secure. PDO supports parameterised queries, and was first available in PHP 5.1, which shipped just short of SIX YEARS AGO. Even mysqli supports parameterised queries, and that shipped more than SEVEN YEARS AGO.

If you're using the ancient mysql extension (i.e. the mysql* functions) that is YOUR FAULT, not the fault of the language.

[ Parent | on HN ]