throwaway212121·15 years ago·discussNot unsurprisingly, x' AND email IS NULL; -- works as the username with no password. Injection FTL.