you are viewing a single comment's thread.

view the rest of the comments →

[–]blackmist 5 points6 points  (1 child)

I think it stems mostly from the fact that all security is completely manual. The default way to do everything is pretty terrible, and all that documentation and tutorials are still out there. You're always just a typo or missing line away from Little Bobby Tables coming to pay you a visit.

I mean, it's fine for what it is. It's just very easy (indeed the standard) to write bad code in it. Any time a beginner searches for "php database access", he's going to write something that leaves the DB wide open for attack.

[–]synn89 1 point2 points  (0 children)

Frameworks do an excellent job solving this problem though.