I really want to check out the secret behind this login page. I used to be able to do it because the admin wrote code that was vulnerable to SQL injection like this:
c.execute("SELECT username, password, role FROM users WHERE username = '" + username + "' AND password = '" + password + "'")
But it seems like the admin added some checks to defeat my payload. Give me some examples I can use that might bypass the checks