add comments
1. add boolean based sql injection script.