SamReidHughes

Right, but usually when you want to make something secure (like a jail cell) you only have to think in 3 dimensions (and we all should know how perilously foolhardy it is to think in only 2!). If you make your jail cell out of PHP, the PHP interpreter might at a future time change the material your bars are made of, or reconfigure the lock so that a clothespin can open your current design, or consider your walls to be nonexistent because you've used the wrong number of equal signs, or change the behavior of some obscure molecule in a way never previously documented. You can't just build your jail cell so that it works in this universe, you have to build it so that it works in every universe, even ones you have no way of knowing the existence of.

Jabo

so why is php so popular? because it's free and easy? you get what you pay for

Wizard1988

And thats how technology works, NO?

What language would you suggest? Ada?

__________________
JG-Webdesign

SamReidHughes

Not just Ada, any language where having different behaviors between installations and version increments either gives a compiler error, a runtime error, or is considered a bug, instead of a feature.

Wizard1988

Then I guess blt93932 will have to keep track of that information by using pen and paper.

__________________
JG-Webdesign

titaniumdecoy

So what you are saying is "use a secure language"? Care to give an example of an insecure language? A program in any language can be made secure if the programmer knows what he/she is doing.

SamReidHughes

No, I don't have any radical opinions like that. It's not like you should write code in a theorem prover...

But it would be a nice start to use one where when you look at the code, you know what it's supposed to do.

RobEasy

The principle of least surprise. That may be part of what Sam is talking about, If not then I have just shot myself in the foot.

__________________
Work Hard... Play Harder!