added sql injection tests, removed an override