Several improvements to prevent false positives:
- Encoding ? in method names to prevent unknown method errors (because
  scanners think the ? is part of the GET query string).
- Catching of some known harmless errors, like double DISTINCT or
  "invalid input syntax for type"