I strongly disagree. If you miss one meaningful vulnerability (SQL injection seems to be a known issue) and a bad actor takes a crack at it, you've suddenly lea

I strongly disagree. If you miss one meaningful vulnerability (SQL injection seems to be a known issue) and a bad actor takes a crack at it, you've suddenly leaked the PII for hundreds or thousands of individuals. "Limited to recruiters" is easy to say in the abstract—if you're the sort of person who's building off of a piece of software written in "old PHP" that hasn't seen many (any?) meaningful updates in the last decade, you're probably not the sort of person who is up-to-snuff on the right way to secure the application.