can I sql inject"); DROP TABLE Posts; -- did I even do this right