https://onezeronull.com/2012/10/26/when-php-code-should-really-be-treated-as-unsafe/