title: SQL Injection comments not working properly?
body: <p>The following command allows a successful login regardless of the password:</p>
  
  <p><code>SELECT * FROM users WHERE username = 'eve'-- and password = 'asdasdasd';</code></p>
  
  <p>Because it ignores everything after the "--"</p>
  
  <p>But the following command does not: </p>
  
  <p><code>SELECT * FROM users WHERE username = 'eve'--' and password = 'asdasdasd';</code></p>
  
  <p>for some reason because of the extra apostrophe, when using sql injection generated from the following SQL command:</p>
  
  <p><code>"SELECT * FROM users WHERE username = '" + username + "' and password = '" + password + "';"</code></p>
  
  <p>and using the following inputs:<br>
  username: eve' -- <br>
  password: asdasdasd
  <br><br><br>
  Why should it care that there is a single apostrophe after the comment operator???
  And what would be the correct input such that it will ignore the rest?</p>
  
  <p>Thank you</p>