SQL injection – theory in perspective