more fingerprints for sqli operator hijacking