[ams6110]

Years ago I worked on a web app that had a "hidden" page that would do something like:

  SQL.exec($_GET['sql'])

Was used for support to be able to access customer data to be able to reproduce bugs, etc.