PHP itself has been pretty secure for a while. If you're concerned about security within your application, go with a framework that handles things like database

PHP itself has been pretty secure for a while. If you're concerned about security within your application, go with a framework that handles things like database access for you. The biggest thing to watch out for is SQL injection. There's so much old, viulnerable PHP code out there - and much of it in the examples people put out there for beginners! OWASP has a PHP Security Cheat Sheet you might find helpful: https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet