working on a sql injection probing client