1. Suppose there is a web application running with a SQL Server database and "SELECT * FROM Accounts WHERE CustomerID = ‘" + txtCID + "'" is a statement written in a program to support several web pages of the application. Here txtCID represents a string value of CustomerID which user enters on a web page. If you are a hacker and want to take advantage of this SQL statement to steal a copy of information of all customer accounts, what CustomerID value would you enter on that web page (to be captured in txtCID of the query)? Hint: see examples on some slides of the PDF file in this module.