Understanding Prompt Injection Attacks