Password-reset flaw haunts WordPress admins

TalkBack 1 of 16:

Next »

• Thread View
• Flat View

Open source and PHP at its worst

I cannot fathom the design decisions that went into PHP. Maybe that's because there weren't any.

That "language" (I use that term in the broadest sense here) is accident upon accident, quirk upon quirk, patch upon patch.

PHP is a complete mess without a single guiding vision other than to allow cowboy coders to whip up insecure and unstable sites with no knowledge of programming. I could write a book about the stupid decisions in PHP.

While WordPress is one of the absolutely most insecure webapps ever written (it has been plagued by faults such as this), you can somewhat forgive the WP developers for this one. PHP has a bad and misguided behavior allowing arrays to be injected into parameters. Combined with weak and dynamic typing you really need to know all the quirks of PHP to avoid mistakes such as this.

Posted by: honeymonster   Posted on: 08/11/09 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now