in reply to Re3: passing parametersin thread passing parameters
Or even more simply, q{' or '1' = '1} which means that it is always true and the person can login without knowing any passwords.