connect to DB
first injection (union select)