See https://learn.rtcamp.com/courses/wordpress-development-basics/l/coding-standards-and-best-practices/t/security/