Is the kohana framework good?

Question

Kohana

I want to write a service. Kohana chose because I know him very well. The service is not to say that it is complicated, in terms of storing personal information, but with its own chips, payment, user's personal page. Now, about the security of user data, how is the framework, do not worry?

Answer 1

Is the VAZ 2101 good?
When it arrived, it was good. And now it is a disgusting piece of guano that does not meet any modern requirements.
Approximately the same situation is now with Kohana.
Better use modern frameworks, stop torturing the corpse.

Answer 2

Purely in terms of security - it all depends on you))
As for the framework: it is morally old. The php world has already switched to psr-4, but here they haven’t even been able to switch to psr-0 yet. According to Gitlab: 40 commits in 3.4 develop since July. The framework is not bad, it is dead.
My advice to you is to learn what is developing rapidly and in demand. What dies - forget, you won't make money on it.

Answer 3

Kohana works quite fast despite the fact that the approaches used in it are somewhat outdated. For protection"
you need to correctly configure the regexps of the route parameters to filter incoming data, use orm\querybuilder to avoid injections to work with the database, protect forms from CSRF using methods of the Security class, Use keys \ tokens of at least 40 characters in length. Also It does not hurt to look at the section on security in the official manual https://github.com/kohana/core/tree/3.4/develop/gu...

Answer 4

You need to understand that if you choose third-party software (framework) for your project, you need to think about supporting this framework in the first place. Kohana is dead. I would recommend that you learn a few fremworks. Yii - for small and medium sized projects. Zend framework - for medium and large scale projects. Reasons for support: yii is very popular and has good support, at least for now. Zend is made by php developers, and as long as php is alive, the framework will not die and will be developed at least by php developers.