https://www.illusionsofwisdom.com/secure-coding-in-php-dodging-the-common-pitfalls/