https://www.cyberkendra.com/2014/09/sql-injection-flaw-on-yahoo-escalated.html