Comment on Drop your unpopular opinions here because c/unpopularopinions is filled with popular opinions
KairuByte@lemmy.dbzer0.com 10 hours agoNo, that’s quite different. PHP is a language, any language can be made secure so long as it isn’t running client side.
This is like saying PHP and a script kiddy are equivalent.
stopforgettingit@lemmy.world 9 hours ago
I am using PHP as a metaphor. Like, even a script kiddie could get up a working PHP site and it doesn’t matter how spaghetti the code is - it will still run.
Even a vibe coded site can be secured, the language doesn’t matter. Shitty sites with terrible security have always and will always exist on the web. AI didn’t start this trend and we should not pretend like web development has been like this for years.
KairuByte@lemmy.dbzer0.com 7 hours ago
AI didn’t start the trend but it has pushed that change to an extreme. A user who has no concept of security can sling up a nice, polished-looking application and publish it to the web. That was always “possible” but the bar needed to get to the point of publishing was higher, so the chances of pushing insecure code was lower.
The number of “developers” who literally don’t know how their application works is staggering. I have seen people literally say “I don’t know how it works” of their own project, and that should be terrifying for published code.
Again, for small diy things it’s whatever. But as a project released into the wild it is, at least currently, irresponsible.