I study php OOP a couple of weeks, made the structure of MVC with a router.
https://github.com/versinsk/mymvc
Are there any vulnerabilities in this site and how well / poorly written is the code? He took many routers as a basis, paid attention to the strict verification of the name of the controller and method with an array of templates.
Ps Waiting for any criticism, for me it is very important.