https://ma.tt/2007/06/on-wp-security/