SQL Injection

The quote is inserted directly into the SQL string, and terminates the query early.

This is what caused the syntax error we saw in the logs.

code
SELECT *
FROM users
WHERE email = ''
AND password = ''
Application initialized. Awaiting login...