ASP is a dynamic web application framework which has been developed by Microsoft and allows a programmer to build web applications, web sites and web technology. It is built on CLR or Common Language Runtime. ASP started life as ASP+. The .NET was added later in a move to integrate ASP with Microsoft's.NET framework.

PHP is a widely used system for scripting in dynamic web programming. The code is embedded in HTML, and must be read by a server which has a PHP processor. PHP is a free software system and users can access the complete source code to use as they wish.

PHP is generally thought to be less secure than ASP.NET. Much of its vulnerability has been put down to the ability of hackers to access information from remote sources such as an SQL database which may be linked to a web server which is run by PHP.

Hackers who manage to break into the system can delete or steal the information they find, or use this as a basis for sending out SPAM or use Malware to attack Dos.

The security issues around PHP are thought to result from poor input from programmers or lack of integrity in the language programme itself. PHP is bringing out measures to improve the security features of the programme by introducing something called taint checking – which is supposed to check that programmers are inputting valid information.

When working with PHP constant vigilance is required, plus there are patches which can be bought to increase the security in order to help raise the level of security on web hosting servers.

There are also some people who argue that ASP.NET, being a newer system than PHP has codes which are more vulnerable to hackers than PHP. There is still an ongoing debate between users about which systems are the best security- wise.