The login data are validated on client and server side.
Hide the index.php from the url (the performance will be better if it done directly
from the apache configuration).
hide the index.php (see configuration yii).
version without naming space.
adding namespace.