C Sqldatareader Get Number From String Sql Injection Vulnerability