lessons 15-17 added: html5, mcrypt, xss,  eval, exec, MVC pattern of application