my $name = "' or name = 'admin"; my $passwort = "') or passwort not in ('"; my $sql = "select name, passwort from user where name = '$name' and passwort = password('$passwort')"; print $sql;