Your clients can be everywhere in the world. With AWS you might have a datacenter or CDN hosting your website in almost any geography you end up picking with just some mouse clicks.php. The manipulation with the argument username results in sql injection. The assault could be initiated remotely. The exploit has actually been disclosed to the public