Re: Languages/platforms used for Web apps. Any stats?

[Gary Warner <gar () askgar com>]

php is quite a bit MORE than overly represented, based on number of 
security issues, but its handled by securityfocus at a more basic level. 

See my most recent rant about it here:

http://birmingham-infragard.org/phpurgency.shtml

There are actually several MILLION websites, which can be easily and 
quickly identified in Google, which are "instantly rootable" because of 
problems in the underlying PHP applications.

If you want to skip to the root of the issue instead of reading my rant, 
see:

http://www.securityfocus.com/bid/11964

(which basically says EVERYTHING WRITTEN IN PHP IS DANGEROUS, ok that 
might be a slight overstatement)

and

http://www.phpsecure.info/v2/zone/pVulns

which is a database listing 454 PHP-based applications and their 
security issues.