How to hack a database using sql injection