T-SQL : DOS attack possible