Please, do not write just a link to original writeup here.

Original writeup (https://github.com/chamli/Write_Up_Ctf/blob/master/SECCON_2017/web400_sqlsrf.md).