Re: Comments on PHP security

On Thu, Jan 11, 2007 at 04:17:31PM GMT, Alain Williams [addw@phcomp.co.uk] said the following: > On Thu, Jan 11, 2007 at 05:04:30PM +0100, Stefan Esser wrote: > > > PS: Stop the "We are secure" marketing and face reality > > More to the point: ''We might be secure because we are careful experienced > programmers'', > however many of those who write in PHP are not careful and/or experienced, we should > be looking to help those people - there are more of them than they are of us. > And for the programmers that write programs that require safe mode to be off or don't provide a provision for having it on. STOP telling your users things like "If your webhost has safe mode on then they suck". Safe mode is the only way to get around certain situations. Get a clue. You know who you are. Somehow I doubt any of these said programmers are on this list. Shame. Mark -- Mark S. Krenz IT Director Suso Technology Services, Inc. http://suso.org/