<yambe:breadcrumb>Internet tips and tricks</yambe:breadcrumb>
For websites that use ASP and Oracle combination, "' or 1=1 --" (without double quotes) can be used as username or password for SQL injection.