The project in five facts.
Challenge, approach and results.
Web applications are essential in today's digital world for everyday communication, business operations and processing of sensitive data, which is why their security is one of the most important development requirements. PHP (Hypertext Preprocessor) frameworks, which enable faster, more organised and more secure development than manual PHP implementation, are becoming increasingly popular amongst developers. The results of the practical work showed that Laravel's robust package ecosystem, extensive documentation and vibrant community enable exceptionally rapid development, whilst Yii proved to be a reliable, secure and stable framework that gives the developer greater control over the application architecture.
Problem
Web applications are essential in today's digital world for everyday communication, business operations and processing of sensitive data, which is why their security is one of the most important development requirements.
Solution and Method
PHP (Hypertext Preprocessor) frameworks, which enable faster, more organised and more secure development than manual PHP implementation, are becoming increasingly popular amongst developers. Laravel and Yii, two of the most popular frameworks, support the MVC (Model-View-Controller) design pattern and have numerous built-in security features, yet they differ in development philosophy, level of automation and community support. The aim of the diploma thesis was to study and compare the Laravel and Yii frameworks from the perspective of practical use, web application development and security.
The basis for the research was the development of a functional NutriCare application, which facilitates communication between users and nutrition professionals, and a review of official documentation, professional literature and security measures. The application was created using both frameworks and had standard features, including role management, registration, communication and defence against the most common web threats. Particular attention was paid to web application security, especially defence against SQL (Structured Query Language) injection, XSS (Cross-Site Scripting) and CSRF (Cross-Site Request Forgery) attacks, session management, data encryption and user authentication.
When used correctly, both frameworks offer a high level of security. A higher level of automation and user-friendly methodology make Laravel particularly popular, as they reduce the risk of developer errors and enable faster development. Yii, however, provides stricter, more technical and more reliable control over security mechanisms, making it especially suitable for complex and long-term systems.
Results
The results of the practical work showed that Laravel's robust package ecosystem, extensive documentation and vibrant community enable exceptionally rapid development, whilst Yii proved to be a reliable, secure and stable framework that gives the developer greater control over the application architecture. The theoretical and practical analysis leads us to the conclusion that the choice of framework depends on project requirements: Yii is more suitable for security-sensitive, complex and long-term solutions, such as the NutriCare application, whilst Laravel is more suitable for modern web applications and rapid prototyping.

Module, programme and stories.
Your diploma project for a real company.
A diploma thesis at Academia solves a challenge from a company – often the one where you do your 800 hours of placement. Read about the Podatkovna znanost module or book a consultation.