back

natas20

31-08-2026 15:27 w

the mywrite() method saves the $data parameter inside a file, the data is separated by a newline \n. meaning we could inject our own key and value using this newlines:

name => "roee"\n # <--- newline is inserted by us here
admi => 1

theres also a debug method:

ill inject it in burpsuite:

flag: 7meHZ1l2zPoK2v1qfTUxq4Ydfja4UlmU