On my website I use simple html with cgi/perl to connect and maintain a mysql db. I'm very comfortable with perl and cgi but was considering moving to php because of speed benefits.

Recently I read the php security vunerablilites with apache and linux and it made me very nervous.

perl-cgi or php apache module with mysql, Opinions?

thanks.

personally, i'm a huge fan of php. i've been using it along with mysql for awhile now, and have never had any security issues.

in my opinion, the difference between PHP and perl (just started getting into perl a few months ago) is that PHP is generally a little easier to work with, but you don't have the flexibility you do with perl (especially when working with reg-exs).

however, PHP was designed to be used primarily on the web, whereas perl was not. so PHP has its advantages there. in terms of shell scripting, perl is the obvious choice. but on the web end, PHP can do most anything perl can, and most of the time with easier to understand code.

at least in my opinion.

The PHP security issue I'm referring to is here and it's major:
http://security.e-matters.de/advisories/012002.html

Having been hacked before I'm sensitive to this but there is a fix.

Do you see any noticeable performance improvements from php to perl?

-tom