orudge wrote:C++ ... buffer overflows
Correctly implemented, that shouldn't be a concern.
When was the last time you used your own buffers (static or otherwise) in C++? And why?
basic_string, vector, list, deque, &c. all exist for a very excellent reason, and if the function in question can't handle them, it needs to be re-implemented.
OTOH:
The generally clued people in ASR wrote:After a brief diversion with PHP, I decided that PHP indeed belongs outside httpd. It also belongs outside the Unix box. Feel free to stick it on a MS box, though; the OS is so full of holes, another few won't matter.
<and also>
I gave up on php security when I discovered that its include would happily take a URL, retrieve it, and include it without any warning. It only takes one programmer to allow the variable that goes into the include to be hit and FOOM!
ObDisclaimer: I have never used PHP, and so have no personal experience with its potential security holes.
[12] not a footnote.