Mason detects that a web application is vulnerable to SQL injection, however, he is unable to see the results of the injection. He sends SQL queries to the database, which causes the database some delay in giving responses. He is able to detect from the time it takes the database to respond whether a query is true or false. What type of SQL injection did Mason use?