Your filter checks for OR....but apparently not XOR.

This query passes your GreenSQL checks:

SELECT * FROM user WHERE name = 'fghg' AND pwd=SHA('d') xor pwd != sha('d')

e.g.
username: fghg
password: d') \ xor pwd != sha('dede

I had a nice time trying to pass the sql injection test :)

GreenSQL is a very good idea, I like it :)

Is it going to implement connection pooling, event-driven socket I/O, etc?

Regards,

Milen Rangelov (mrangelov-at--globul-dot-bg)