Hacker News Reader

> It used to be true, and was a valid criticism. It hasn't been true in so long, that claiming so says more about the claimer than the language.

Not saying that you are wrong here, but what insecure-by-default parts of the language have been changed since PHP 5?

View on HN

Principally, the Register Globals change that turned every POST & GET entry into a variable was removed entirely in PHP 5.4 (1st of March, 2012), and the was old Mysql API was removed in PHP 7.0 (3rd of December, 2015).

Reply on news.ycombinator.com