https://opencartforum.com/topic/62958-sql-inject/?do=findComment&comment=571586