https://deepquest.code511.com/blog/2017/12/webapps-freelance-website-script-2-0-6-pr_id-catid-sql-injection/