charsheet / Unnnnlucky - PlaidCTF 2013

Posted by anonymous on 12 May 2013
My friend is in my D&D campaign - could you get me his character name? He administrates this site.
Or here (faster).

Charsheet was an easy SQL injection

1. Find search box
2. ') OR 1=1#
3. ???
4. PROFIT! (r3al50ftwar3ftw)
Where does The Plague hide his money?

We also had to prove that we were able to scroll through 11 or so parts of Hackers on Youtube. It was in an account with the number 03087-08351-27H.