Working with SQL Injection Match Conditions