Python code injection working