Extended with extra SQL statements for sql injection