sql injection login payload

This sql query:-SELECT * FROM users WHERE login='admin' AND password='1' OR '1'='1'; evaluates to SELECT * FROM users WHERE login='admin' AND TRUE. tiktok seller indonesia login so it will select rows where login column value is admin. tidak bisa login bpjs kesehatan It can be used to bypass the login It has a serious SQL injection vulnerability Its better to use Prepared Statement