Your current balance is $9.999.999

And we are in!
We successfully gained access to the application without having to guess the password, using SQL injection.

SELECT * FROM users WHERE email = 'user@email.com' AND password = '' or 1=1--'
Logging in user user@email.com

SQL Injection