https://alfach.com/2013/01/09/php-security-checklist-cheatsheet/