added sql injection test