https://jericho.blog/2006/03/27/disclosure-andys-php-knowledgebase-aphpkb-multiple-vulnerabilities/