sql injection login payload

We get a successful login even though these are not valid credentials — it’s because we’ve found a successful SQL injection payload that tricks the database into thinking we are a valid user. android volley login example