comment out non-sqli