minor additions of sqli