DEV Community

Discussion on: How to choose the right backend technology?

 
leob profile image
leob

Thanks for the list - so it's immediately obvious that at least 95% of the vulnerabilities are in older versions (5.x or 6.x) - we're at version 8.x now. This also indicates that vulnerabilities are actively being addressed, as can be expected from a popular open source framework.

Thread Thread
 
prafful profile image
Prafful Lachhwani

So conclusion?

Thread Thread
 
leob profile image
leob • Edited

Conclusion is that PHP isn't in itself unsafe, and Java isn't by definition safe (and then I'm only talking about server side Java, of course client side Java is notorious for containing numerous security holes over the years).

Thread Thread
 
llbbl profile image
Logan Lindquist

You can write Crap code in a bunch of different languages, not just PHP. The Frameworks help with security and encourage best practices, but much is still left in the hands of the Dev. Also FYI, Symfony is more popular than Laravel in Europe.