wor1

Is there any protection on the password columns? select salt from user where userid='1' (works) select password from user where userid='1' (not works) Thanks for the exploit nice found