Why is Code Igniter not recommended??

CodeIgniter is not what most people would consider a secure framework. ... It's an old framework and doesn't make use of newer functionality that exists within PHP. Because of that, it's had to write a lot of its security stuff itself.

Your statement is not true.  CI is a secure framework when used with php's best programming techniques. Not to mention that security is taken seriously.