Matthew Peck-Deloughry: “I have always thought that too, I think PHP is destined to n…”

Stephen Rees-Carter @valorin6d5b4fac2

I find it painful sometimes, sitting in a security conference where they talk about how insecure consumer devices and enterprise appliances are because of all the command-line RCEs on everything, and yet PHP is the insecure one? 🤦

Matthew Peck-Deloughry @mdeloughry6d

I have always thought that too, I think PHP is destined to never lose its >5.xx reputation, or even to developers the misconception that PHP and WordPress are the same technology. I’m not saying Wordpress is bad but it was just(is) super popular and was easily misconfigured!

07:02 · Oct 30, 2026commit 5e511e7

Stephen Rees-Carter @valorin6d

Agreed. Even WP's bad security reputation is unearned in some ways. I did WordPress security for many years, the core is pretty rock solid. The security issues were almost always some dodgy plugin or theme the site owner installed and forgot to update.

Commit