Add example of SQL injection