Hacksplaining Log in

Want everyone on your software team to learn this? Free 14-day trial.

Train my team

The -- characters you entered caused the database to ignore the rest of the SQL statement, allowing you to be authenticated without having to supply the real password.

www.securebank.com

Welcome back, user@email.com!

Your current balance is $8,266
code
SQL 
SELECT *
  FROM users
 WHERE email    = ''
   AND password = ''
Application initialized.