https://goldleo1.github.io/posts/mysql-string-bypass/