Testing for SQL Wildcard Attacks