https://javescript.com/en/best-practices-for-wordpress-website-security/