> For the complete documentation index, see [llms.txt](https://unsbotch.gitbook.io/unsbotch/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://unsbotch.gitbook.io/unsbotch/my-writeups/twitter-challs/login-as-a-user-2.md). # Login as a User #2 PinkDraconian just published new task on twitter with 20 solves.

A basic sql injection web challenge with provided source code. While visiting web-site we can look at main page:

we can see the basic form of login and first we try is sqli bypass:

there is 500 which talking about sqli but if we look at code:

There is a filter on `=` sign. Also we can not use username bigger than 20 chars and less than 3, keywords "true", i noticed that there is .toLowerCase() function using and thought about overflow of database, like char as `İ` converted to lowercase will used as ii. After some attempts i found that it s not right vector because just we don't have any profit parameter to overflow. Then i just tried to experiment with query code:

But similar attempts was failed

So error triggering because of there is additional comma in the password field, if we add plus one quotation mark in the password field:

We don't have error:

So the password has evenly quantity q.m, so we can just comments after username and bypass authorization: