[Phpmyadmin-devel] guidelines for avoiding security pitfalls