moved SQLInjecter to a full plugin