MSSQL manual injection and empowerment