PHP: Injecting code on non-sql code?
<p>I've read about MySQL injection and how it's done. I have a doubt, how could a login code be attacked if it doenst get data from a database?</p>

<p>This is what my login code looks like:</p>

<pre><code>if($_GET['login'] == "myname" &amp;&amp; $_GET['password'] == "mypass"){
     echo 'welcome, admin.';
else
     echo 'login failed.'
</code></pre>

<p>ps: this is for practice sake only, I know hardcoded passwords shouldnt be used.</p>
