https://deepquest.code511.com/blog/2017/01/image-sharing-script-4-13-cross-site-scripting-sql-injection/