This is cool and nice, Nevertheless, is it possible to add some blind SQLi function in the payload? For example email=orwa@gmail.com' WAITFOR DELAY '0:0:5'-- username=orwa' WAITFOR DELAY '0:0:5'-- And check for time delay?