working POC for sql injection detection