Reorganizing SQL injection works