string commandText = "SELECT id from users where name = '" + tb_Name.text + "';

SELECT id from users where name = 'INSERT INTO Uploads VALUES ('Name'); DROP TABLE Upload --'

'; DROP TABLE Upload;--

SELECT id from users where name = ''; DROP TABLE Upload;--`