here we can’t send ;, --, # and every other comment character. so, let’s send this as username: ' or 1 or ' and password anything else, for example, a

Flag: FLAG-4f885o1dal0q1huj6eaxuatcvn