Bypass Custom WAF using SQLi