Hacker News new | ask | show | jobs
by xyzzy123 4522 days ago
So the other issue with not using a framework is security.

Modern frameworks have a level of built-in mitigation for the common stuff like XSS, SQLi and CSRF and so on.

The problem is that most developers don't even understand all the things their framework is doing for them.

Non-trivial PHP code written without the aid of a framework is a great morale booster for penetration testers.