Member Avatar for charlie123

ok guys , because I’m really confused --
which is better in order to have a good website
I need it secured , nut I want it fast also with a very good looking actually

could u help me with which one to choose plz ?

Thanks



Outsourcing software development

  • 7 Contributors
  • 7 Replies
  • 270 Views
  • 2 Years Discussion Span
  • Latest Post Latest Post by kwesiaryee

Dani AI

Generated

No single choice is objectively "best." Selection should be driven by project constraints: hosting platform, team skill, expected scale, third-party libraries, and delivery timeline. That explains the split in the replies: and favor Java/JSP for security, highlights PHP's large community, and and correctly point out that security and speed depend primarily on architecture and developer practices.

Practical trade-offs, at a glance: PHP — fastest route to a working, good-looking site; massive ecosystem and cheap hosting, good for small-to-medium projects. JSP/Java — better fit for large, high-concurrency or enterprise systems where JVM tuning, strong typing and mature tooling matter. Classic ASP is legacy; for new Microsoft projects prefer modern .NET (ASP.NET/Core). Any of these can be fast and secure when used with proper patterns.

Concrete, immediate actions that close the security/speed/design gaps seen in this thread:

  • Always use parameterized queries/prepared statements (avoid string concatenation into SQL).
  • Encode output to prevent XSS and validate input server-side.
  • Use HTTPS/TLS, secure cookie flags, and CSRF tokens for forms.
  • Hash passwords with a modern algorithm (bcrypt/argon2) and apply least-privilege to DB accounts.
  • Cache where appropriate (HTTP headers, CDN, opcode caches, connection pooling) and profile before optimizing.

Example parameterized queries (short illustrations):

<?php
$pdo = new PDO('mysql:host=localhost;dbname=app','user','pass');
$stmt = $pdo->prepare('SELECT * FROM users WHERE email = :email');
$stmt->execute([':email' => $email]);
$user = $stmt->fetch();
PreparedStatement ps = conn.prepareStatement("SELECT * FROM users WHERE email = ?");
ps.setString(1, email);
ResultSet rs = ps.executeQuery();
Set cmd = Server.CreateObject("ADODB.Command")
cmd.ActiveConnection = conn
cmd.CommandText = "SELECT * FROM Users WHERE username = ?"
cmd.Parameters.Append cmd.CreateParameter("username", 200, 1, 50, username)
Set rs = cmd.Execute()

Recommendation summary: match the stack to hosting and team skills, use a reputable framework (for built-in security defaults), and follow the checklist above. That approach yields a secure, fast, and attractive site regardless of language.

Recommended Answers

All 7 Replies

Member Avatar for anuj_sharma

Well i think that JSP is much more secured than the other two.
I hope some professional can clear this out.
:)

Member Avatar for mexabet

I prefer PHP personally. It is open source and help can be found almost everywhere on the web.

Member Avatar for PoA

It's not true that JSP is much more secured. It totally depends on the developer of the application.

Well i think that JSP is much more secured than the other two.
I hope some professional can clear this out.
:)

My preference is PHP for web applications. As for desktop application, I prefer Java or Python (still learning in progress).

commented: exactly +2
Member Avatar for R0bb0b

All web applications are subject to the same sql and header injection tactics, and as of php6 register globals along with some other not necessary poor programming tactics but commonly used incorrectly tactics will no longer be available. These are things that php has been under scrutiny about for a long time and there are warnings posted everywhere so if you fall under that category if is of your own neglect.

Member Avatar for anuj_sharma

Can anyone refer some good sites relatid to SQl Injection

Member Avatar for kwesiaryee

Generally, it will depend on the developer to make any application secure enough, but if I need to choose between JSP, PHP and ASP,... I will choose JSP to be the most secure.

A good developer can create a very secure app with jsp as java in general is based on a secure infrastructure. With the added benefits of JavaFX, the sky is your limit with security and design. but most design cannot be mentioned here as web development uses css and html for design and this has little to do with security.

In my opinion JSP first, when we talk about security. Then followed by PHP because although php is no where close to jsp even at the current php 5.3 (with the all new Object Orientation), its worth learning as its very easy to study and implement. As for ASP, well Microsoft always needs an antivirus,.. that should give you an idea of how porous their security is even on their best app.

I will tell you to be good in php for web and be better with java based app if security is your concern.

Good luck

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.