- added support for sqli in admin + more tests