I am very new to PHP and some people said that writing PHP code without a framework is insecure. I am not sure about that!
Is it possible to write highly secure code without any frameworks? If so, how?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
Frameworks are code, too. What you get from them are standard, tested, and implemented best practices.
So, sure, you can write perfectly secure code without a framework, but you have to be good enough to be able to! You have to know the best practices for PHP and be able to implement them properly.
If you are new to PHP, a framework allows you to code more securely than you can without one because you lack the experience to think about all the areas that need special care.