![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/2665e448-91d9-484d-919d-113c9715fc79.png)
129·
11 months agoOf course. You receive the password in plain on account creation, do the process you need, and then store it hashed.
That’s fine and normal
Of course. You receive the password in plain on account creation, do the process you need, and then store it hashed.
That’s fine and normal
Is what you host publicly accesible? If not, then it’s not even a concern. You could even host unsafe apps, but if you know they are entirely inaccessible, it wouldn’t change a thing.
As for php itself, it’s mostly due to the fact it’s by far and wide overwhelmingly crushing the competition. A quick Google search says it’s used by about 80% of websites. So, it has, by far, the most (negative) publicity, biggest target, and most inexperienced/bad devs working on it. Software is as secure as its made. Junior dev don’t often think about security. It’s bigger, so it happens more often.
Honestly quote irrelevant. It’s hidden away. It’s not shown to us. It could use literally any frame of reference, like farts since the beginning of times, if it’s converted for you, then it’s not.