Bypassing airport security via SQL injection