correctly format SQLi payload for inline query technique