Bugtraq mailing list archives

Re: PHP security (or the lack thereof)

From: "Bojan Zdrnja" <bojan.zdrnja () gmail com>
Date: Sat, 17 Jun 2006 11:06:03 +1200

On 6/16/06, Darren Reed <avalon () caligula anu edu au> wrote:


From my own mail archives, PHP appears to make up at least 4%
of the email to bugtraq I see - or over 1000 issues since 1995,
out of the 25,000 I have saved.

People complain about applications like sendmail...in the same
period, it has been resopnsible for less than 200.

Do we have a new contender for worst security offender ever
written ?


Well, PHP is a programming language and Sendmail is an application -
I'd say you are comparing apples and oranges here.

If you really want to compare applications, take phpBB for example
(which is the winner in this case), but I don't think it makes much
sense looking for a new contender for worst security offender ever
written ...

Bojan

Current thread:

PHP security (or the lack thereof) Darren Reed (Jun 16)
- Re: PHP security (or the lack thereof) Bojan Zdrnja (Jun 17)
  - Re: PHP security (or the lack thereof) Jessica Hope (Jun 21)
- Re: PHP security (or the lack thereof) Jose Nazario (Jun 17)
  - Re: PHP security (or the lack thereof) Geo. (Jun 19)
    - Re: PHP security (or the lack thereof) kicktd (Jun 21)
    - Re: PHP security (or the lack thereof) Geo. (Jun 21)
    - Re: PHP security (or the lack thereof) Crispin Cowan (Jun 22)
- Re: PHP security (or the lack thereof) Neil Neely (Jun 19)
- Re: PHP security (or the lack thereof) john mullee (Jun 23)
  - Re: PHP security (or the lack thereof) Darren Reed (Jun 26)
    - Re: PHP security (or the lack thereof) Ronald Chmara (Jun 27)

(Thread continues...)