A web application receives a user input with a SQL injection attack string that references a function. The apparatus comprises a first client system and a second client system. The fraudulent transactions in the set of payment card transactions are clustered to form a set of prototype transactions. Each library implements a common API. The first spring provides an elastic force to the control member.