While the review of our MiRTA PBX code is underway to prevent any further sql injection problem, I have added a simple and effective Fail2ban filter to automatically block any attempt to feed SQL commands over the URL