testing injection check with connection variable