title: Good Php Framework for strong security
body: <p>I'm trying to choose a framework that provides really good security of web applications, protects against as much of OWASP Top-10 as possible, such as:</p>
  
  <ul>
  <li>Sql Injection</li>
  <li>XSS </li>
  <li>CSRF</li>
  <li>Authentication</li>
  <li>Authorization</li>
  <li>etc.</li>
  </ul>
  
  <p>the thing is I've tried researching really heavily:
  Cakephp, Zend, Yii, Code Igniter, Kohana and some have <em>basic</em> authentication, maybe a little authorization, but nothing for any application that needs solid code-security.</p>
  
  <p>Is most of the vulnerability types above currently secured by only writing custom code in these frameworks? </p>
  
  <p>This is kinda my first experience with using frameworks, everything up til this point has been custom php web apps. My whole thought for php-frameworks was it was going to be <em>easy</em> to protect against these vulnerabilities, given it isn't <em>natively</em>, why use one? Or is there a framework out there I'm not looking at which is better than those listed above for strong web app security? Thanks</p>