Comment by hn_submit

PHP has been the worst thing to happen to the web. It was insecure many decades ago and still is. Even CGI with C is probably more secure, never mind technologies like Java, ASP.NET and Rust with are far more secure.

I even have a preference for web stores which use ASP.NET or Java since I know my personal information are safe there.

There are probably thousands of web stores using PHP unwittingly too. I've noticed only about half of them have been taken offline.