Note: this is a repost from the eschipul.com blog and also lives as a help file on Tendenci.
This blog is a WordPress blog written in PHP. And WordPress, which is written in PHP is a great platform when secured properly.
So why did our team choose to rewrite Tendenci Open Source and in the Python Programming language? It is a question I get asked a lot. We’ve never been a company that likes to talk in the negative if at all possible, yet it is important to talk about the megatrends going on given we work with associations and nonprofits.
Source: https://www.upguard.com/blog/which-web-programming-language-is-the-most-secure
Source: http://info.whitehatsec.com/rs/whitehatsecurity/images/statsreport2014-20140410.pdf
Source: http://info.whitehatsec.com/rs/whitehatsecurity/images/statsreport2014-20140410.pdf
Popularity of a language is a trend, and what you want is as many developers familiar and liking the language of your open source project as possible. This means you have a better chance to have a secure web site and therefore a more secure future.
To be fair – as Disraeli said – “lies, damn lies and statistics” – so there is no one perfectly secure language any more than there is a perfectly “safe” hammer. There will always be operator error and programmers make mistakes.
So we’re not saying Python is perfect, and all of us have used most of the other languages on those charts at some point. We’re just saying we are pleased so many other programmers also like Python and Open Source. THAT is the best that can be done to secure your future online. Secure code that you can examine yourself and even host yourself!
Addendum: As I post this on the Tendenci Blog. Given we focus on non-profits, associations, memberships, education, medical, religious – basically the do-good cause-based organizations, I believe it is particularly important that the project is as transparent as possible. Sometimes it is healthy to inform everyone of WHY we made a decision seven years ago. Python was the right call.