https://deepquest.code511.com/blog/2017/02/joomla-djcatalog2-1-5-sql-injection/