This is the internal directory system of RiRiLa Company, a common internal system in enterprises, typically backed by a database. You can input an employee's name to query related information. Use this system to practice SQL Injection techniques.
You can observe through real-time previews and the actual syntax executed by the server, gradually piecing together the correct query syntax.
Your goal is to obtain the query result of SELECT flag FROM flag
, where the flag content is the answer to this challenge.
In the database query syntax, there are two ways to represent strings: one is '
and the other is "
. You need to guess which method is used in the original query syntax.