add sqli from http://www.exploit-db.com/exploits/28854/