Prompt Injection: Attacks and Defenses