ning the logs for his web server and discovers that a user sent input to a web application that contained the string waitfor. what type of attack was the user likely attem