In other words, my (long version) question is: Are developers able to get away with, more using ASP.net than PHP in terms of writing secure code for their apps?
I ask this because ASP.net has many built-in security mechanisms such as SQL injection prevention. PHP, as far as I know, does not, at least not in that sense. PHP does give you the tools to do it, like wrapping each query with mysqli->real_escape_string(), but it's my understanding that ASP.net automatically does it for you. I generally structure my PHP apps in a way that are very secure, but we all know there are countless PHP programmers out there who either do not have basic security knowledge or simply do not care, resulting in tons of vulnerable apps. I'm wondering that if such careless programmers used ASP.net instead, would some of their carelessness be automatically patched up.