Testing for LDAP Injection