https://www.junookyo.com/2012/11/sphpforum-04-cross-site-scripting-sql.html