Sqlite3

No LIMIT

by YesWeHack
drag_indicator
info
drag_indicator
inputs
drag_indicator
inspect

Limiting the query

This query should give us the any password, but the limit 0 prevent it.

Can you bypass it ?

Goal: recover the admin password

Hints

Hint #1
expand_more

If the LIMIT 0 is a problem, just remove it.

Solution

Read the solution
expand_more

$name = admin' --

Explanation

In SQLite you can use -- to comment the end of the line. Here it completely remove the LIMIT. You could also use /* to comment a block.

drag_indicator
waf
INPUT
OUTPUT
drag_indicator
code
drag_indicator
result