$sql = "SELECT * FROM users WHERE username = '" . $POST['username'] . "' AND password = '" . $POST['password'] . "';"

' or 1 == 1 ---

SELECT * FROM users WHERE username = '' or 1 == 1 --- AND password = '';