https://ind2x.github.io/posts/sql_injection_filtering_bypass/