The old joke:

The guide to PHP security:

Use something else.

The end.