This is the internal directory system of RiRiLa Company, a common internal system in enterprises, typically backed by a database. You can input an employee ID to query related information. Use this system to practice SQL Injection techniques.
You can observe through real-time previews and the actual syntax executed by the server, gradually piecing together the correct query syntax.
Your goal is to obtain the query result of SELECT flag FROM flag
, where the flag content is the answer to this challenge.
The injectable field in this challenge is numeric
, and the technique differs slightly from that used for string-type
fields.