Basic Sql Injection Stringstream C