Don't forget pistol whipping the application just because it was written in php.