http://www.kitploit.com/2019/02/php-security-check-list.html