>>>>> "S" == Simon Cozens <simon / simon-cozens.org> writes: S> Well-written PHP is precisely as secure as well-written Ruby; I'm not S> sure what one might mean by the idea of security in a high-level S> programming language. They all do what you tell them. If you tell them S> to use user-supplied data in a system call, they'll do it. If you don't, S> they won't. Sometimes ruby just don't want pigeon% ruby -e '$SAFE = 4; File.open("aa")' -e:1:in `open': Insecure operation - open (SecurityError) from -e:1 pigeon% Guy Decoux