PHP Security for Architects