Demo of how SQL injection works, and how the use of prepared statement preventing SQL injection