added SQL injection for the ones that didn't have it