Created SQL injection function