How can we avoid PHP hack