<s>[INST] There is a HTML page with the following code:
```
<!DOCTYPE html>
<html>
<head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>SQL Injection</title>
</head>
<body>
 <form action="process.php" method="post">
  <label for="username">Username:</label>
  <input type="text" id="username" name="username" required><br><br>
  <label for="password">Password:</label>
  <input type="password" id="password" name="password" required><br><br>
  <input type="submit" value="Login">
 </form>
</body>
</html>
```
How would an attacker try to inject malicious SQL into this login form?[/INST]