Mid String Sql Injection Test