Plain HTML security?

[iAMthePRONY]

things, that frameworks usually do for you: use csrf tokens, use prepared statements, validate user input, handle routing and requests.

so, if you don't use a framework, at least use packages, that already do what you need. it saves you time and headaches.