php backend + old defense.io code for security