This idiot just proves most of this: http://two-pi-r.livejournal.com/622760.html

  If you just want to stick up for your "favorite" PHP
  framework simply because it's the only f**king thing
  that you know, then go f**k yourself with a hand grenade.
  There are very good reasons I am advising you not to write
  new things in this f**king completely broken piece of shit,
  and security is only one of them.

Amen.