Lead

Welcome to SecHub. This is a forum where you can learn about everything.

The SQL query would become: SELECT * FROM users WHERE username = 'john' AND password = '' OR '1'='1'; Because '1'='1' is always true, the query effectively bypasses the password check, allowing the attacker to log in as any user!