PHP UK Conference 2013 - Richard Johnson - PHP is evil (Defensive programming)

This talk explores the security challenges and considerations associated with PHP, a language that, despite its accessibility and speed, has evolved from a hasty origin. The speaker discusses the evolution of PHP's security features and outlines best practices for PHP development. Key topics include the use of underlying C libraries, potential pitfalls in the LAMP stack, and various security antipatterns that developers should be aware of. The session emphasizes the importance of secure coding practices and how to effectively review code to mitigate vulnerabilities.