Hands-on lab
The Honest Mistake
An internal staff directory with one line of bad code in it. The search box builds its SQL by gluing your text into the middle of a query. Find the row it is trying to keep from you.
Labs give each member a unique flag, so you need an account to take one. Sign in or create one — a username and a passphrase, no email.