Re: PHP Security

Ian C. McGarvey wrote:

I have been studying PHP all summer because I wanted to put some PHP code on my schools web site. I got to school and went to the web design teacher. I asked him if they had installed PHP on their server. He said that the district thinks that it would be a HUGE security risk and that people at my school would try to hack into the server (what bull).

If you want to know why people have this perception, read the first response you received: Santosh Jambhlikar wrote:

PHP HIT BY ANOTHER CRITICAL FLAW A new security flaw in the PHP Web service protocol used by a large number of Web applications could allow attackers to take control of vulnerable servers.

This is what people read in the media. Developers write vulnerable code, and the "blame" gets shared by PHP itself. The end result is that people think PHP itself is insecure. Of course, if you ever see a news story that describes PHP as a web service protocol, you probably want to stop reading immediately. :-) Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/