SQL injection that gets around mysql_real_escape_string [2011] | Hacker News Reader