It looks like his code has no error handling of any kind and will be incredibly non-robust against any kind of malicious/invalid input.

PHP is basically fine, but it is not the language of choice when you want to get a lot done with very few lines of code.