can manipulate the input and inject it in such a manner that without username or password he can login. Okay After Enough of those injection we are now moving towards Bypassing Login pages using SQL Injection. Enjoy hacking.