Review the log and answer the attack type and mitigation.
Log:
2025-07-15 11:04:01 - GET /product?id=5 UNION SELECT username, password FROM users
1. What type of attack is this?
2. How would you mitigate this?