https://devhubby.com/thread/how-to-prevent-script-injection-attacks-in-php