https://www.junookyo.com/2012/09/vbulletin-search-ui-sql-injection-vbb.html