Seriously though, PHP has come a long way from the CGI/SQL injection days, though I feel its namespacing and scoping rules are rather ancient.