Retrofitting Existing Web Applications with Effective Dynamic Protection Against SQL Injection Attacks