Mssql injection process detailed