https://www.daboweb.com/2007/05/30/sql-injection-en-wordpress-22/