Re: ampache security audit

[Bernd Zeimetz <bernd@bzed.de>]

> Could you please elaborate more on this statement:
>
> "Especially for such **insert curse words here** languages like php".
>
> Why do you feel that php is a **insert curse words here** language?
>   

It starts with a broken design of the language itself (for example
missing namespaces) and ends with the problem that php developers do not
take security seriously.

I recommend to read http://www.php-security.org/ and
http://blog.php-security.org/ - if you're interested I should have some
more bookmarks on *why not use php*.


As I don't want to stasrst a flamewar here, feel free to contact me on irc.



Cheers,

Bernd