merliin wrote:The short and sweet of it is, until another scripting language creates something that can compare with CPAN (and contains a similar number of MATURE commonly used modules, sorry PEAR), I would not consider changing from perl. Although I do the trivial stuff in PHP as it generally puts a lower load on the servers if they do not have mod_perl installed.
MERLiiN
I'm not going to argue that PERL has a large archive of share library resources in CPAN. BUT..
PECL (PHP Extension Community Library) &
PEAR (PHP Extension and Application Repository) are being used and they are gaining a larger following... archives arent built over night.
The same goes for Python though.. Python is a great language and the bulk of google is built ontop of the language... but
PyPI (Python Package Index)repository isn't huge either..
You know my dog could program in Perl and release code.. so just because some one codes in PERL doesnt make it more mature, or less vulnerable either. That stands to say about all code. Code is only as good as the coder.

Not defending the statement...
merliin wrote:I have even seen people claim that their applications were less exploitable since they didn't (use) version numbers(WHAT THE???).
but Security through obscurity does have some merit.. only works when the coders doesnt broadcast the version numbers.. but version numbers must be used for documentation purposes and in administration areas..
I.E. phpbb removing the version number from the footer. It doesnt make the code safer, it just makes exploitable code less visable. (No neon sign saying my door is unlocked... )
A little google hacking example of
ihackstuffDB for phpbb