Rating:

(Written in Simplified Chinese) PHP MySQL multiple statements + error-based blind injection.

Original writeup (https://blog.cal1.cn/post/BCTF%202017%20web%20writeup).