Direct Prompt Injection in Customer Chatbots