Hi I am trying to decide on a CMS to use for a new project. Security is the most important element of the CMS. I am looking to use a PHP based CMS such as Joomla or Drupal however, PHP has many security flaws which worries me.

The data which needs to be secure will be inside a database and relate to account information. I am wondering what is the best way to do this?

What I am wanting is a frontend which is made in php/js(joomla) and then I have a backend api which is written in Haskell to handle money transfers ensuring nothing goes wrong. In between the two I want a controller written in perhaps Python or C.

I never want the php to touch the database. I want it to relay messages to the controller that's written in python or C and then it inputs to the database, sanitising data etc

Am I perhaps thinking too deeply about this? Just wondering if anyone has any ideas on what I should do....

I can't quite explain what the project is as I don't want the idea to be stolen, but it has a lot money transactions involved so security is essential.