Fell in love with PHP,CSS,HTML,jQuery,Ajax and many many more years ago. sheriff
Those sites generally live from the content itself
session_regenerate_id(true)
Any attacker can create a self-signed cert for your domain