Hacker News Reader

Nextcloud and owncloud are written in PHP like so are many other web server apps, especially wiki servers.

I've always had misgivings about the security of using and running PHP. Does PHP software still tend to be insecure as in the past? Why are there so many web apps (especially wiki servers) written in PHP instead of e.g. Python, Rust or some other language?

View on HN

They even had to come up with their own security scanner (https://scan.nextcloud.com/). I assume because they don't even trust their own code mess or cause you can f-up your PHP conf in so many ways that your server becomes vulnerable.

Yeah, only PHP software needs audits and quality testing. /s

Yeah it is, don't use it.

All the advancements on PHP are great, it's becoming a JAVA more and more, but likely any PHP legacy apps will never see an upgrade to the latest version. And starting a new project in PHP, nah, there are better more well designed programming languages.

Reply on news.ycombinator.com