Writing secure Drupal code link/reference