included xss and sqlinj
Changed to error based SQL inj