Challenge 9

Administration

SELECT * FROM users WHERE username='.$_POST['username'].' AND password='.$_POST['password'].'