The unexpected dangers of preg_replace() | Hacker News Reader