That's what I am trying to say. Common security practices will put you out of danger. I'm confused why we should have recipes to 'secure PHP'. Why don't the reg

That's what I am trying to say. Common security practices will put you out of danger. I'm confused why we should have recipes to 'secure PHP'. Why don't the regular security measures simply apply? My guess is that many don't know what they are so they apply follow 'secure PHP' guides and feel safe, though they are not.