post-types.php securiy audit.