http://gamestore-id.blogspot.com/2013/01/tutorial-sql-injection-untuk-newbie.html