Not the language?<p>PHP is the only lasting language where making code that allows SQL injection is easier than code that forbids it.<p>PHP includes all the worst practices you&#x27;ll find on any languages. Javascript has the eval problem - PHP has it too; Perl have the too fluid type system where you can&#x27;t specify anything - PHP too, except that it lacks Perl&#x27;s tainted mode; Asp made it easier to create code subject to XSS than code that isn&#x27;t and is subject to directory traversal - guess what, PHP copied it... and the list goes on and on.<p>This release fixes still some more problems, but PHP will never become a good language.