asp.net vs. jsp vs. php (especially for website security)

[code beginner]

Hello,

I was over at the w3schools site, and I thought the asp.net training modules looked cool. It was kind of like "we know the popular types of modules you want to build into your website, and we have stuff ready to go that does just that".

I was wondering what people who actually use asp.net think of it. A lot of people like to bash microsoft. But I think they are a company who continues to improve their products.

Security is a huge issue on websites. So I was wondering what people on this forum think of asp.net in general, but in particular what your impressions are on how asp.net handles security issues (like preventing sql injection attacks, creating secure login areas for membership sites, encrypting data traffic, securing credit card transactions properly, etc.).

I looked through a .jsp book at the bookstore, but it was so anti-microsoft it was kind of ridiculous.

Thanks for any insights.

[oracleguy]

Regardless of the language, the web application will only be as secure as you make it. You can make a wildly insecure ASP.net app or a very robust secure one, just like with PHP or any other language.

I've used ASP.net a handful of times, the one aspect I liked is that it seemed very easy to get what you need done quickly. Granted in doing so the HTML is generates if you use their wizards and such can be a little icky in places but that is usually what happens when you use generated code.

I don't get very many chances to use it because most of the time what I am doing has to run on Linux servers so I use something else. But I haven't had any real negative experiences with ASP.net.