Sql injection

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...