added SQL injection scanner