PL or SQL : DOS attack possible