Source: https://crypto.stanford.edu/cs155old/cs155-spring09/papers/sql_injection.pdf