Which is secure website?

[nicholas3972]

Which is secure website? PHP or .NET

[felgall]

They are two slightly different things but neither has ANY actual security issues in it apart from those you put there - usually when you do not properly validate inputs.

Any security problems are 99.9999999999999999999999% certain to be poor code on the part of the person using it rather than an issue with the language/interface itself.

[wonshikee]

I would argue that .NET has a higher security standard since it's a framework and forces you to do things a certain way. PHP can be just as secure, however it leaves it up to the developer to know what to do.

[K. Wolfe]

I would argue that .NET has a higher security standard since it's a framework and forces you to do things a certain way. PHP can be just as secure, however it leaves it up to the developer to know what to do.

Though there are frameworks available that handle most of the security for you, as well as decrease development time.

[felgall]

I would argue that .NET has a higher security standard since it's a framework and forces you to do things a certain way. PHP can be just as secure, however it leaves it up to the developer to know what to do.

If that is the case then in what way is vb.net any more or less secure than php.net? Also in what way is PHP running on .net any more or less secure than PGP running on an alternate interface?

[wonshikee]

Though there are frameworks available that handle most of the security for you, as well as decrease development time.

Of course, as I stated PHP is just as secure given the developer knows what to do, but PHP in itself does not enforce many things that a framework may.

[felgall]

Even if you do use a framework, it isn't going to properly validate all your input fields for you and so it would still be possible for someone to fill the database with junk. You need proper validation on all the inputs in order to implement real security that prevents any form of junk being entered and not just junk that might happen to be more destructive.