https://www.systemtek.co.uk/2018/08/php-mysqli_real_escape_string-integer-overflow-arbitrary-code-execution-vulnerability-cve-2017-9120/