https://deepquest.code511.com/blog/2017/03/gr8-gallery-script-sql-injection/