yes it is easy and its why its a field full of ******ed mokey's who barley can operate a keyboard and think since they can write a sql query they must be gods gift to IT and thus with there many many days of training know how to configure a server/workstation/network better then the actual IT guys.
I always make my password ' or 1 = 1 or '' = ' just to keep them honest.