I think the worst thing about PHP is all the ancient tutorials that litter the web like landmines. SQL injections everywhere.

And there's way too many low-budget wannabe web developers who know just enough to blow their own feet off. Or more likely whoever paid for its feet, because that web dev will be nowhere to be seen a week after handing it over.