sqli and hashes