But then the attackers try with username `stanleyjobsox` and password `love123`.

And your application code does something like:

```Python