We are doing a PHP project with simple user signup, sign-in, and account page. We are also collecting PayPal, email id, bank account name, and account number to pay money for them.
I read a lot of Google links saying that hackers will hack mainly to get credit card details, for sending free emails, etc. As we dont save any credit card information, do we still need to worry too much about security? Do we need to worry about code quality, SSL or server related security?
We are using PDO and saving passwords in MD5 format.