https://blog.modpr0.be/2012/09/17/weberp-4-08-4-sql-injection-vulnerability/