BS8390 : inject sql "false" params