Replace First Character In String Sql Injection