News for hackers. Stuff that matters.

A comment on Standard Ebooks. Parent comment

Re:Standard Ebooks by krapp on Monday January 01, 2024 @04:15PM (#38835412)
Inevitably, like everyone who rejects PHP frameworks because "PHP is already a templating language", you just wound up reinventing the framework anyway.

I'm not complaining - It's just, there's a reason everyone goes for the existing frameworks and it isn't addiction to complexity. Raw PHP code is legendarily insecure and prone to XSS and other issues if you don't do things exactly right.

Nice site, though.

[ Parent | on HN ]
Re:Standard Ebooks by cowsandmilk on Monday January 01, 2024 @05:12PM (#38835805)
> prone to XSS and other issues if you don't do things exactly right.

Not any more so than sites with frameworks. I’ve found XSS issues in Java Spring framework built sites that didn’t “do things exactly right”. A framework doesn’t magically fix that.

[ Parent | on HN ]
Re:Standard Ebooks by krapp on Monday January 01, 2024 @05:47PM (#38836024)
No one mentioned magic. Frameworks are designed to do what PHP developers wind up implementing in an ad-hoc, haphazard way themselves, and tend to be better at doing it on average. Any code can have security issues but I'd trust a battle-hardened open source PHP framework over some random coder's hubris any day of the week.
[ Parent | on HN ]