https://php-include.com/php-security-protecting-business-apps-from-email-injection/