The PHP Development Team has issued an important statement that deals with the security of PHP, and of PHP-based applications. The trigger for releasing this statement was the growing misconception in the PHP community regarding recent security problems, which exploited bugs in PHP applications, rather than bugs in PHP itself. It's a recommended read for anybody using PHP.