PHP, Security, etc.

>le PHP is insecure may-may
>I'm too stupid to prevent XSS holes and SQL injections without the language making them basically impossible: the thread

File: base64_no.png (133KB, 560x504px) Image search: [Google]

133KB, 560x504px

>>52342339
I didn't say anything about XSS or SQL Injections m8

dem unserialize() RCEs tho

>>52342339
this

File: 1439119464435.jpg (49KB, 550x600px) Image search: [Google]

49KB, 550x600px

>>52342339
>>52342354

>>52342262
insecure by design

>>52342262
All of those suggestions are pretty good, though they're not going to do anything to stop inexperienced developers from making bad decisions (which will never stop happening regardless of what changes get made to PHP). I do like that the changes may break backwards compatibility with weak security, which would force project owners to update (inb4 "we're sticking with PHP 5.x!")

File: 1384821039705.jpg (232KB, 750x1000px) Image search: [Google]

232KB, 750x1000px

>>52342441
Those people deserve to sit on a rotting corpse of legacy software until someone finds a remotely exploitable 0day. Then they deserve to burn.

>>52342467
>Those people deserve to sit on a rotting corpse of legacy software until someone finds a remotely exploitable 0day.

>Until

Isn't it ridiculously easy to upload a shell to these meme websites? Seems like PHP is too shit to be used.

>>52342467
Agreed.

File: 200_s.gif (63KB, 437x200px) Image search: [Google]

63KB, 437x200px

>>52342476
Upload? Maybe.

Execute? Idk

>>52342476
Is it? The fact that you haven't done it tells me it probably isn't that "ridiculously easy".

>>52342525
I don't really know I just watched some youtube videos and security researchers were saying skids use PHP for their c&c and a huge majority of them are exploitable. (and they showed how it's done)

>>52342262
Three out of those four are from the same nobody trying to make a name for himself with this: https://wiki.php.net/rfc/php71-crypto

I don't know what libsodium is but I'm sure it's an NSA ruse

>inb4 some securitard calls me a fag

File: 1398574226455.gif (2MB, 325x213px) Image search: [Google]

2MB, 325x213px

>>52342476
Please elaborate on what these "meme websites" are, friend

File: 069.jpg (9KB, 217x232px) Image search: [Google]

9KB, 217x232px

>>52342543

> doesn't know who Daniel J. Bernstein is

> doesn't know who Frank Denis is

> thinks libsodium is NSA

GTFO

File: goatsebuntu.png (14KB, 297x253px) Image search: [Google]

14KB, 297x253px

>>52342546
I second this query.

>>52342543
You're right. I didn't even notice the names were the same!

So it's just some unimportant aspie then?

>>52342546
>>52342579
You can literally google dork for them

File: 1362095890981.gif (499KB, 245x176px) Image search: [Google]

499KB, 245x176px

>>52342955

>>52342339
This

>>52342339
A language should at least not encourage them.
But if you don't use PHP without a templating language nowadays, you're doing it wrong anyway.