Rating:
http://rawsec.ml/en/XiomaraCTF-2017-write-ups/#50-easy-login-web-exploitation
I don't remember