Create sqli_tricks.md