PHP Cyber Security: XSS, XXE, XML DoS, SSTI, CSRF, SSRF, RCE, SQLi; JWT, API authentication, deserialization flaws