http://www.kitploit.com/2012/12/jsql-injection-java-based-automated-sql.html