SMS: SQL Injection Attacks and Defense