python injection attack