A novel technique for SQL injection with PHP PDO's prepared statements | Not Hacker News!