https://kevin-haas.com/posts/sql-injection/