The unexpected dangers of preg_replace() · HackerTrans