https://eitanblumin.com/2018/10/28/dynamic-search-queries-versus-sql-injection/