Showing a small example of sql injection that can be done when string concatenation is used