Re: [tlug] Clamav reports a virus: Exploit.Gif.PHPembedded

["Stephen J. Turnbull" <stephen@example.com>]

Hung Nguyen Vu writes:

 > I still don't understand whyPHP doesn't check the input more carefully.

Because the generic case is hard to do, and PHP is not about doing
hard things, it's about making tedious things convenient.  It leaves
the hard things up to the programmer, who usually knows enough about
the input that he can do a few simple checks and be reasonably safe.