diff --git a/internal/waf/injectionutils/utils_test.go b/internal/waf/injectionutils/utils_test.go
index aa67452..10af15a 100644
--- a/internal/waf/injectionutils/utils_test.go
+++ b/internal/waf/injectionutils/utils_test.go
@@ -17,6 +17,7 @@ func TestDetectSQLInjection(t *testing.T) {
 	a.IsFalse(injectionutils.DetectSQLInjection("1234"))
 	a.IsFalse(injectionutils.DetectSQLInjection(""))
 	a.IsTrue(injectionutils.DetectSQLInjection("id=123 OR 1=1&b=2"))
+	a.IsTrue(injectionutils.DetectSQLInjection("id=123&b=456&c=1' or 2=2"))
 	a.IsFalse(injectionutils.DetectSQLInjection("?"))
 	a.IsFalse(injectionutils.DetectSQLInjection("/hello?age=22"))
 	a.IsTrue(injectionutils.DetectSQLInjection("/sql/injection?id=123 or 1=1"))
@@ -44,7 +45,6 @@ func BenchmarkDetectSQLInjection_URL(b *testing.B) {
 	})
 }
 
-
 func BenchmarkDetectSQLInjection_URL_Unescape(b *testing.B) {
 	runtime.GOMAXPROCS(4)