https://deepquest.code511.com/blog/2018/06/paypal-notify-bypass-persistent-web-vulnerability/