SQLi, use error messages and PostgreSQL's fancy XML functions.

Original writeup (https://neg9.org/writeups/tamuctf-2021-api-2-the-sequel-solution/).