RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server
| From: | HKG) | Date: | Fri, 12 Apr 2002 05:32:09 +0000 |
| Subject: | RE: [PHP-WIN] Configuring securely in IIS5 under Windows 2000 Server | ||
| References: | 1 | Groups: | php.windows |
| Request: | Send a blank email to php-windows+get-13047@lists.php.net to get a copy of this message | ||
> >>All PHP does, is create a dynamic webpage, ie create a web page
> >>"on-the-fly". This does not expose any holes any more than creating an
> >> html page does.
>
> not true - PHP is as secure as the pages you program.
> lack of user input verification is a good example.
If you wants to be philosophical about it, then this is of course true
for any languages such as Perl, Java, C/C++, Pascal, Fortran, Eiffel,
Modula, ADA, Lisp, Prolog, Assembler, and even Born-Shell, you name it.
The point Fleming raised is still valid.
//Anders