https://www.zackvision.com/weblog/2007/01/movabletype-security-bug/