← back to room
SQL Injection

NewsDesk — Date filter

Scenario

The archive filter accepts a date and returns only how many articles matched—no row details. Different inputs change the count in predictable ways. Prove you can distinguish true from false conditions blindly.

Your approach

  1. Submit a normal date and note the numeric count returned.
  2. Append a always-true condition and confirm the count stays the same.
  3. Append an always-false condition and confirm the count drops.
  4. Use that behaviour to show boolean inference works on this endpoint.
  5. Submit the task flag once the lab registers a successful blind test.
Archive filter

Articles by date

Filter by date suffix. Only a count is returned — watch how the response changes.

// count appears here