Plesk Panel SQL injection in HTTP_AUTH_LOGIN