💉 SQL Injection Sandbox

🎯 Objective: Log in as admin without knowing the password.

💭 Think about it: The server builds an SQL query like:
SELECT * FROM users WHERE username='INPUT' AND password='INPUT'

🔑 Try entering: ' OR '1'='1 as the username.

📚 Why it works: Your input "closes" the username string and adds a condition that's always true!