> it's not really representative of the sector of developers that make a living with PHP. Anecdote: I was integrating a paid Magento extension (which charges a

> it's not really representative of the sector of developers that make a living with PHP. Anecdote: I was integrating a paid Magento extension (which charges about $1000 for a license) into an existing shop, and some poor code in their templates made me look deeper into their main code. Six hours later, I had: * 4 different ways to read any file on the server that PHP can read, * 5 different ways to upload any file to a certain directory on the server, including one that lets you overwrite the webserver's security configuration for that directory and then execute uploaded PHP code, * a way to delete certain things the administrator has created in the backend, * a way to overwrite other customers' uploaded files, * a way to edit other customers' information, which lets you then XSS/XSRF those customers when they view that information. I have reviewed other Magento extensions in the past, and I found many poor ones, but nothing as atrocious as this.