Hi All, I have one project that is using ESAPI4PHP which is a port of OWASP's ESAPI. I am starting another project using Code Igniter and I notice that they have built-in security controls (form validation, etc...). Has anybody used both? If so, which would you choose again?