allow-php-in-posts-and-pages SQLi vuln updated