https://kakatoji.blogspot.com/2017/04/easy-waff-sql-injection.html