Basic Sql Injection Stringstream To String