SQL injection inserts a code fragment that makes a database statement universally true, like _.
SELECT * FROM users WHERE username = " AND 1=1--'
SELECT * FROM users WHERE username = " AND 1!=1--'
SELECT * FROM users WHERE username = " OR 1!=1--'
SELECT * FROM users WHERE username = " OR 1=1--'