发送短信: SQL injection attacks and defense