Well, as phpCOIN is free, they dont bother much about security vulnerabilities. I'd say, go with Paid Billing Script and be tension free, they do update the script regularly and release security patches as well as soon as they get notified of the vulnerability.