Some people like it to feel superior and some parts of PHP make an easy target. Not to mention sheer mass of PHP scripts that make a huge target.