https://www.junookyo.com/2012/11/phpfox-301-cross-site-scripting.html