vulnerable code sample