On: Google releases Skipfish, an open-source web secur...

[tptacek]

Uh, very no.

[axod → tptacek]

back it up with some data?

I'd say wordpress vulnerabilities alone account for quite a bit.

PHP is such a low barrier to entry, plus there's just so much php code about.

[tptacek → axod]

For now, you should just take my word for this.

PHP is the least of WordPress' problems. Or. Well. Not the worst of WordPress' problems.

[Batsu → tptacek]

I love the sentiment as a php connoisseur, but my lack of knowledge about enterprise language has me asking why...?

[_tggb → Batsu]

My (uneducated about security) guess is that it is because most bugs are in code written in a language by a programmer, not runtime bugs or bugs in the language itself. And that when it comes to languages, how easy it is to shoot yourself in the proverbial foot could (should?) be looked at as being as (or more, depending on your POV?) important then how secure the runtime is.