SQL injection 1

  Trim () function removes white space characters or other predefined characters on either side of a string. 
 For example, the double quotes inside the subject are parsed, so do not close (with double quotes) 

This is the case when the direct input is lost (filtering occurs)

So we directly inject

User=admin ') #&pass=7321

Just leave the rest of the comments out.

Logged in! Flag:nctf{ni_ye_hui_sql?}

SQL injection 1