sql_injection_timing check sec server: require 'json'