If you are a beginner at web design, don't use PHP for the following reason.

Hi Helen,

I would disagree with this actually. Personally, I found that PHP and MySQL gave me a better understanding of how databases and web systems work. By gaining an understanding of this, it helps to improve website security.

I love Ruby on Rails, but I personally think that it doesn't allow you to get as 'raw' and close with databases as PHP does. I agree that SQL injection can be a problem, but sometimes beginners need to experience this to gain valuable knowledge for security.

Also, HTML and CSS are required whatever you are creating websites with. PHP and Ruby add extra dynamics to a website.

I guess this is personal opinion, but I would recommend PHP and MySQL to anyone.

Once familiar with HTML and CSS though, a person can take the PHP and Mysql courses offered by Treehouse and learn how to prevent SQL injection.

Until then you can learn and use PHP without a database. You do bring up a good point to consider though Helen. If you are using PHP with a database, you need to make sure SQL cannot be injected via user input.

I guess I should also mention that if you are using PHP (even without a database) you need to be aware of how PHP code can be injected with user input. Treehouse also shows you what to watch for there and how to sanitize user input in order to prevent that.

That's cool, I didn't realise Treehouse taught you how to protect your self from those sorts of things.

Hi

Thanks for the replies guys. I guess it's true that beginners will have to experience it happening and just learn to stop it. PHP and MySQL are great to use, but SQL injection is just one of those things that is hard to avoid.