detect not-quite sqli but close enough