https://blogs.oracle.com/sec/044_sqlinjection_3