In the early 2000s, everyone in my bubble knew that PHP was a security nightmare, only seconded by Flash. In the meantime, Adobe gave up on Flash, but PHP is still alive and rocking.

How did that happen? Did PHP get some serious makeover? Do developers just not care?

  • Vlyn
    link
    fedilink
    English
    arrow-up
    15
    ·
    9 months ago

    The only real scripting language which doesn’t need any server software configured is PHP

    I mean you still need to configure the webserver to handle PHP (Apache, Nginx, or whatever). It’s not active by default.

    But of course for a webhoster that’s really easy at least.

    • bus_factor@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      9 months ago

      Sure, I guess I should have phrased that as “any additional server software beyond the webserver itself”, but it’s kind of a mouthful. And people would still get after me in the comments, because actually, that’s technically true for CGI as well, although the poor performance makes it a no-go for anyone doing anything commercially.