SQL injection detection