What is the best way, to program a secure PHP project with an administration and a frontend WITHOUT using ANY framework?
I recommended "Laravel" to the client, but they are hell-bent that NO framework whatsoever can be used.
So far, I can think of two very important things:
Use PDO and "prepared statements"
Avoid brute force attacks by blocking login attemts > 3
However, Laravel (PHP framework) and Django (Python framework) offer so more than that.
But, as I said, the client is hell-bent not to allow frameworks or any open source software whatsoever.
So, not even composer is an option.
Do I have the skills to code it from zero? Yes.
Can I do it is a very secure way? Not sure... and that's why I am here!
Please tell me, how I can make sure, my PHP application is SECURE even without using ANY 3rd-party software
THANK YOU :)