不知攻焉知防

select * from users where username='zaixiaziyang' and password=''or 1=1 --