dscrd

>Having said this, I've found limited proof that a particular language is any safer than another as it comes down to safe coding policies and risk mitigation strategies.

Proof is right there in the article. To have PHP on the live server is a security risk, period.

1. That you do not require any part of Go (except the obvious ones that are inside the compiled binary) to exist on the live server.

2. That Go is designed as a programming language.

Why would they have a host with PHP installed on the same server where money is handled?! Totally irresponsible.

I'm being serious. Unless you have Facebook's resources (and probably not even then) DO NOT USE PHP FOR ANYTHING THAT REQUIRES SECURITY! If you are, start a migration process today. Whatever you think it'll cost, it'll be worth it.

If you cannot decide from the billions of choices out there, go with Go. It's hardly perfect, but way better and simple.

"I don't like language arguments."

Well, if you like PHP, how could you like language arguments? After all, they always end up destroying your beliefs.

> Any respectable PHP developer nowadays uses a decent framework, and there are many.

"There are many" equals "almost all are bad".

No, you're quite wrong there.

No, they also suffer from the pattern misuse pattern and are also slow as hell.

"If PHP developers are made to feel terrible, they will leave and there will be less and less great developers working with PHP."

I don't quite see how this might be a problem. Does the author think those people would be less great in another environment? Does PHP own these people?

"Often times, people are just complaining about PHP because it’s a popular thing to do."

No. We do not complain about PHP because it's popular. We complain about PHP because it sucks and we are forced to use it.

There are worse things than PHP out there :)

Many of the so-called 4th generation languages (i.e. business shits derived from Cobol with DB support bolted in) are totally crazy in this sense. Not only are identifiers often case insensitive, they can also be abbreviated!

Yet people make massive amounts of money with them.

PHP seems to fall apart in the seams when trying to reach a higher abstraction level. For instance, Symfony 2 tries very hard to include modern OO techniques in there, but the end result is that its performance is incredibly bad. Also, the OO basis is ripped from Java (which is not a perfect fit in some places, given that Java is a more static language), which I do not enjoy at all.

Python isn't the fastest dog out there, but doesn't fare so badly with the abstractions, and its OO style suits a dynamic language better. It doesn't try to be a Java.

Neither language will give you much protection against programming errors, nor optimize your code very well like many of the new hip languages (Rust, Go, Nim) do.