cough technically the solution for last step shouldn't have worked .. considering you used an apostrophe to close the value thingy implies that the query in the backend was something like this ..
So the solution: [apostrophe] or 1=1
should've caused a syntax error and wouldn't have logged you in.. (accepting comments would've made it seem more "realistic")
Anyways, the last step was the only thing that sucked (you had to try "incorrect" payloads to complete it), other than that nice challenge. 👍
Quote:select a,b from x where y='userInput'
So the solution: [apostrophe] or 1=1
should've caused a syntax error and wouldn't have logged you in.. (accepting comments would've made it seem more "realistic")
Anyways, the last step was the only thing that sucked (you had to try "incorrect" payloads to complete it), other than that nice challenge. 👍