crude example of SQL injection