https://php-include.com/best-practices-for-php-cms-security/