I have just bumped into a new training platform for web sec called websec.fr. And the under will be my writeup for them.

Level01: #

We have a simple page allowing us to view user information through id:

I started to think this is a SQLi challenge, and we have the source code provided too(but I will cut only where the vuln is):