The Underscore Archives

Hi Jan,

Wednesday, December 5, 2007, 11:04:10 AM, you wrote:

> The downside is you're still running PHP; application-level
> injection and xss bugs are still ten a penny. That's just a
> reflection of the typical* PHP programmer's carelessness**.

Last time I checked JSP was just as vulnerable to developer
carelessness, I've seen more than my fair share of XSS vulnerability
announcements relating to apps built with it.

Is there ANY language out there that a suitably inept developer can't
bring to its knees?

Cheers,

Rich
-- 
Zend Certified Engineer
http://www.corephp.co.uk

"Never trust a computer you can't throw out of a window"