modified HTTP injection