changed SQLi vuln location, did write-up, closes issue #1