Secure PHP Programming: Two Common Mistakes to Avoid