How to code SECURE but WITHOUT using any 3rd party software (e.g. Framework)

Viewed 28

What is the best way, to program a secure PHP project with an administration and a frontend WITHOUT using ANY framework?

I recommended "Laravel" to the client, but they are hell-bent that NO framework whatsoever can be used.

So far, I can think of two very important things:

  1. Use PDO and "prepared statements"

  2. Avoid brute force attacks by blocking login attemts > 3

However, Laravel (PHP framework) and Django (Python framework) offer so more than that.

But, as I said, the client is hell-bent not to allow frameworks or any open source software whatsoever.

So, not even composer is an option.

Do I have the skills to code it from zero? Yes.

Can I do it is a very secure way? Not sure... and that's why I am here!

Please tell me, how I can make sure, my PHP application is SECURE even without using ANY 3rd-party software

THANK YOU :)

1 Answers

Tell the client it will take 10x the amount of time and 10x the cost if you aren't allowed to use an MIT licensed open source framework like Laravel.

Related