Security in PHP Applications -- Four Security Rules That Must Not Be Broken