I find it painful sometimes, sitting in a security conference where they talk about how insecure consumer devices and enterprise appliances are because of all the command-line RCEs on everything, and yet PHP is the insecure one? 🤦
Commit
2b64b3b
I have always thought that too, I think PHP is destined to never lose its >5.xx reputation, or even to developers the misconception that PHP and WordPress are the same technology.
I’m not saying Wordpress is bad but it was just(is) super popular and was easily misconfigured!
Agreed. Even WP's bad security reputation is unearned in some ways. I did WordPress security for many years, the core is pretty rock solid. The security issues were almost always some dodgy plugin or theme the site owner installed and forgot to update.
commit 2b64b3b
Yeah when you can't control the ecosystem around your product paired with the internet being a much more naive and oblivious place just paved the way for foot guns!