Advanced CSRF / Have fun and profit / Time-based Blind SQL Injection through CSRF attacks - View it on GitHub