If the application returns "Your account name is test", you have confirmed the application is reflecting input back to you. This is crucial for a UNION-based injection.
Username: admin' AND LENGTH(password) = N -- Increment N until login succeeds. Sql Injection Challenge 5 Security Shepherd
(or similar logic to force a true condition for the administrator account). Retrieving the Key If the application returns "Your account name is