April 15, 201016 yr Just wondering if plain html pages are safer than php pages/files from a hacking perspective. Or does it not matter?
April 15, 201016 yr PHP is a server-side scripting language, so assuming you're not really doing anything different than the HTML pages the viewer will see exactly the same output and it will be just as safe.
April 15, 201016 yr PHP is a server-side scripting language, so assuming you're not really doing anything different than the HTML pages the viewer will see exactly the same output and it will be just as safe. Crappy coded php can leave security holes and you face the possibility of sql injections (if the php interacts with a database) html sites can still be attacked via ftp, easy hosting passwords etc.
April 15, 201016 yr Crappy coded php can leave security holes and you face the possibility of sql injections (if the php interacts with a database) This is why i said "assuming you're not really doing anything different than the HTML". Given the question is html vs php i'm guessing we're not talking about databases and such here.
April 16, 201016 yr Author Crappy coded php can leave security holes and you face the possibility of sql injections (if the php interacts with a database) html sites can still be attacked via ftp, easy hosting passwords etc. Re: HTML can still be attacked via ftp, hosting passwords, cpanel I'm assuming this is all related to the password used, right? So creating a strong password will virtually eliminate the risk of attacks.
April 16, 201016 yr Re: HTML can still be attacked via ftp, hosting passwords, cpanel I'm assuming this is all related to the password used, right? So creating a strong password will virtually eliminate the risk of attacks. Not exactly, you should use SSH/SCP/SFTP/rsync-over-ssh instead of FTP - http://www.43folders.com/2008/07/14/dump-ftp
Create an account or sign in to comment