Good Php Framework for strong security [closed]

Question

I'm trying to choose a framework that provides really good security of web applications, protects against as much of OWASP Top-10 as possible, such as:

• Sql Injection
• XSS
• CSRF
• Authentication
• Authorization
• etc.

the thing is I've tried researching really heavily: Cakephp, Zend, Yii, Code Igniter, Kohana and some have basic authentication, maybe a little authorization, but nothing for any application that needs solid code-security.

Is most of the vulnerability types above currently secured by only writing custom code in these frameworks?

This is kinda my first experience with using frameworks, everything up til this point has been custom php web apps. My whole thought for php-frameworks was it was going to be easy to protect against these vulnerabilities, given it isn't natively, why use one? Or is there a framework out there I'm not looking at which is better than those listed above for strong web app security? Thanks

Answer 1

I'd also say try CodeIgniter.

• Sql-Injection - If you use the active record pattern in CodeIgniter you're secure
• XSS - It's a config value in config.php
• CSRF - Also a config value in config.php
• Login etc. - There are libraries for that like https://github.com/EllisLab/CodeIgniter/wiki/SimpleLoginSecure

Also CodeIgniter is easy to use if you're working with a framework for the first time and has a great user guide which is really easy to understand.

Edit: Since I'm still getting upvotes here in 2019, please check https://laravel.com/