A novel technique for SQL injection with PHP PDO's prepared statements