More websec: PHP

["Stephen J. Turnbull" <turnbull@example.com>]

Is PHP the horror show a quick look at the docs suggests it is?

You'd think SourceForge would know what it's doing, and they use PHP
the way Microsoft uses ASP.  But from a security standpoint it looks
like suid-root [1] Perl minus the taint mechanism with an additional
250 meters of rope....


Footnotes: 
[1]  OK, "suid-root" is an exaggeration.  I hope.  ;)

-- 
University of Tsukuba                Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
Institute of Policy and Planning Sciences       Tel/fax: +81 (298) 53-5091
_________________  _________________  _________________  _________________
What are those straight lines for?  "XEmacs rules."