The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.
The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.