[eluser]n0xie[/eluser]
I was not implying that you were a newbie, nor that you are not a decent programmer. However anyone who has done (web)-development knows that every security measure is only as good as the weakest link. Since 99.999% of the time the weakest link is the programmer, it's irrelevant if the tools are secure: they mean nothing compared to how skilled the programmer is.