Mike,
Aware IM does NOT generate PHP code. Aware IM is a secure Java based system that can be installed at the back end and will handle all database and user interface requirements for your web based system that you configure without any coding at all!
Therefore there are no issues that you mention - there is no code that is publicly available to the client. Aware IM also supports SSL for extra security.
Best Regards