https://am2.co/2015/04/big-security-loophole-with-sql-logins/