add example with sql injection