A Novel Technique for SQL Injection in PDO's Prepared Statements | Not Hacker News!