http://www.perlmonks.org?node_id=509255


in reply to Re: perl vs. php
in thread perl vs. php

Neither. It's an irrelevant question. Programs are secure or not. You can write secure programs in any language (and it's difficult in all of them), and you can write insecure programs in any language (and that's surprisingly easy).
That's not completely true (at least in this case.)
Contrary to Perl, PHP doesn't have a taint mode, which is a deficiency of the language.
Granted, you can still write secure programs without using the taint mode, but it can be much harder to detect the vulnerabilities of your code.

Ciao,
Emanuele.

Replies are listed 'Best First'.
Re^3: perl vs. php
by Perl Mouse (Chaplain) on Nov 17, 2005 at 10:06 UTC
    It's still very easy to write insecure programs that have tainting enabled. The fact that Perl has a tainting option doesn't make Perl secure. It just gives the programmer one more piece of rope (either to hang himself, or to use well).
    Perl --((8:>*