sql extended attack extended