Frameworks aren't for speed or security, and if you can't code efficiently & securely with your own code, God help you when you use someone else's code.
Frameworks are for developing things quickly, with the help from functions & such provided by the framework.
Any "security" that a framework claims to provide, in PHP, isn't much. There are built-in PHP functions & good practices you need to adopt with or without the framework, anyway.
If you're coding your app insecure, no framework is going to stop that. Like anything, frameworks have rules you must follow to stay secure, taking the time to learn those rules when you already know how to code securely is futile unless you're using the framework for other features..
Security & Efficiency is one of the worst reasons to use a framework.. If anything, frameworks will more than likely lead to the opposite. (security holes in the framework, or memory leaks/illegal stack operations/bad practices etc)
The only code you can trust is your own.
By all means, use frameworks for what they're for- Smarty is a great Templating engine, etc. Use tools for what they're made for. Code Igniter is great at organizing your large projects, Zend Framework is good at making things easier in PHP. They both have functions to help you along with security and to use the framework more efficiently. But don't misinterpret that as more efficient/secure than the language their coded in.. That's like saying PHP is more secure than C++.. Well, you can make C++ just as secure as PHP- hence- PHP.
Don't get me wrong, using them for their purpose is great. But frameworks poses no magical properties which make the language they're coded in superior to what it was before, (other than the added features it comes with). It certainly doesn't put less overhead on your scripts..




Reply With Quote

