Assume that a database application executes the following query which takes user input for the product$\_$code field and returns the product$\_$name to the user. The product table stores the supplier$$s names for the products in the column supplier$\_$name.

SELECT product$\_$name FROM product WHERE product$\_$code $=$

Explain how a user unauthorized to view the supplier$$s name of a product can view the supplier$$s name with SQL injection.

Hint: The UNION operator in SQL is used to combine the result sets of two or more SELECT statements.