Injection Challenge 5 Security Shepherd: Sql

But comments allowed.

admin' Password: ' OR '1'='1'

SELECT * FROM users WHERE username = 'admin'' AND password = ''='' Parsing: username = 'admin' AND password = ''='' password = '' is false, but ''='' is true. The = operator is overloaded. This yields a valid login. Sql Injection Challenge 5 Security Shepherd

Username: admin'' Password: ' OR ''=' Or more cleanly: But comments allowed