PHP Security experiments