escaping space character in SQLI attacks

- will hopefully make chrome on sauce labs happy