Window Function Questions Sql Injection