initial commit - includes any hacked injections, don't push this live