[michaelfdeberry]

I agree, I think the problem is more so with developers that don't have a proper understanding and with what comes out of the box.

Microsoft provides a lot of security features that are backed into asp.net that are pretty trivial to enable. From what, little, that I know about php I am not sure the same can be said. I believe that would make a bigger difference about perceived security of a platform