Same vulnerability surface as the Original — modernized form, mode toggle, every attempt audited.
Invalid username or password.
An error occurred running the query — usually means the locked-down database role refused the injection's target.
You are being audited. Every signed-in attempt — successful or not — lands a row in sql_demo.audit_log with your GitHub identity, the payload you sent, the chosen mode, and the outcome. Browse the trail: /api/v2/sql-demo/audit-log.