https://www.junookyo.com/2012/11/yii-framework-search-sql-injection.html