$session = "' OR '' = '";