Insecure Design Security Check (A04:2021)

Analyze PHP code for insecure design patterns — architectural and business logic security flaws that cannot be fixed by implementation alone.

Detection Patterns

1. Missing Account Lockout