Hacker News Reader

Comment by function_seven | Hacker News Reader

Then you should rephrase your statement.

Something like:

    The only secure PHP is version x.x or newer.

View on HN

I do not believe there to be an $x where that statement is true.

Then your previous statement about PHP versions is irrelevant, and you should answer the question you were asked. To wit:

> Given how much has been deprecated/removed since 5.2, would you care to list some that remain?

For the version coming out at the end of the year, what is still insecure that leads you to believe "there is not an $x where that a statement is true"?

I don't see what's so hard to understand.

7.x is better than 5.x but not GOOD ENOUGH.

> 7.x is better than 5.x but not GOOD ENOUGH.

What would make it good enough? Be specific.

I think we agree that the interpreter still isn't a paragon of secure programming practices :P

Reply on news.ycombinator.com