https://www.php-resource.de/forum/php-developer-forum/46672-sql-injection