[Skunkworks] How security flaws work: SQL injection