a$.$ For flag$9($Legacy Login$)-$ this is a straight SQL Injection on the password field.

b$.$ For flag$10($New Login $-$ Option $1)-$ this is a client$-$side data sanitization SQL Injection on the password field.

c$.$ For flag$11($New Login $-$ Option $2)-$ this is both a client and server$-$side data sanitization $(2$x$)$ SQL Injection of the password field.... How can I make the SQL string $\text{'}$OR $1=1--+$ pass flag$10($client$-$side sanitation$)$ and flag$11($client and server side sanitation? This passed the flag $9.$ Thank you for your help