Price and stock never trust the POST body. That is checkout 101 and I keep it in Shop and Booking.
Reviews and mail
reCAPTCHA v2 on review APIs. Newsletter needs consent. Honeypot fields on public forms.
What you get
- Hardening, validation, backups and cron on systems we install — defensive work only.
- Input Validation wired into Shop, Booking or a custom PHP app — live demo first.
- Install help on your domain in Norway, the EU or Ukraine.
- Direct contact with the developer after launch — not a ticket mill.
I develop web applications with this stack for companies in Norway, Europe and Ukraine. One domain, one license, install help, then you run the product.