Exploring the SQL injection vulnerabilities of .bd domain web applications