just some php security in web security class