https://blog.wpsec.com/security-in-wordpress-plugin-development/