“Injeksi SQL Menggunakan Kondisi Selalu Benar” Kode Jawaban

Injeksi SQL Menggunakan Kondisi Selalu Benar

$username = $_POST["username"];
$password = $_POST["password"];

$sql = "SELECT * FROM Users WHERE username = \"" . $username . "\" AND password = \"" . $password . "\"";