Comment by anthony_doan

You don't even use a backend rendering framework?

MVC PHP frameworks are very nice and they don't move as fast as those javascript frontend rendering.

Also the ORM deals with any security problems and most framework deals with other security deals too including session handling.