This is similar to Irish-Name-Repo 1, but with a filter active. Through trials and errors we can deduce that the filter actively blocks common SQL injection terms like UNION or OR.

To bypass this we can just apply the payload admin'-- into the username form. Not only will it skip the password verification but also avoid using those filtered terms.