in reply to Re3: passing parameters
in thread passing parameters

Or even more simply, q{' or '1' = '1} which means that it is always true and the person can login without knowing any passwords.