The sorry state of PHP security | Hacker News Reader