https://www.problogbooster.com/2016/02/magento-security-best-practices.html