php string security sha1 password url-decode url-encode random regular-expressions ereg_replace tool lowercase decrypt encrypt uppercase reverse md5