you could do this...but the real issue is shellcode not extended or embedded sql commands.