foo/* yes this is sqli */