https://tongfamily.com/2005/02/23/security-hole-in-movabletype/