Programming language for web security?

[willsonrobin21]

Which one is the best programming language for web security?

[Steve R Jones]

If someone has made it past your firewall etc..... I don't think it matters at that point does it?

[rlirpa]

If you're thinking of a career in cybersecurity, read the following by Krebs on Security:

https://krebsonsecurity.com/2020/07/...eer-read-this/

[Heretic86]

It isnt about which programming language you use, it is about properly implementing code that does not expose yourself or a user.

Things like SQL Injection and XSS are quite dangerous. Most can be avoided by doing your code in such a way that prevents these types of attacks.

if (!is_numeric(_POST['user_id)){ return; }

If those values you get from end users are blindly trusted, then expect it will get you and others hacked.

[petershene]

While I agree in some fashion that no web programming language is "the safest". I think what gives this idea is that languages like PHP that have a very low entry-level for programmers lead to a lot of bad code and more frequent successes on hacking making it seem that this language is more or less secure than something else. ( It may just well be)

On the other hand languages with very high entry levels are usually used by people who are pedantic and have will be coding in multiple languages for the rest of their life, they probably don't make as many mistakes as Johny who learned PHP a few weeks ago on some quick course and is launching his own web app already. We all have to start somewhere though.


I do also believe that some languages are just easier to leave holes open than others.

[rlirpa]

arsTechnica > Hackers backdoor PHP source code after breaching internal git server

[WPNext]

Hey,

There isn?t really one perfect programming language for web security, it mostly depends on what you?re working on. But some languages are popular because they have good security tools and libraries.

Python is great if you want to build security tools or automate tests. JavaScript is everywhere on the web, so knowing how to write it safely is super important to avoid common issues like hacks or injections. Java and C# are often used in big companies and come with solid security features built in. Go is also becoming popular because it?s fast and simple, making it great for security-related projects.

At the end of the day, the most important thing is to learn good coding habits and understand the common security risks. If you want, I can point you to some easy resources or frameworks that focus on security.

Hope that helps!