https://www.phpeasystep.com/best-practices-for-protecting-user-data/