Sql injection to get the server