DOJO Challenge #26 Winners!

**Executive Summary:** This report describes a SQL injection vulnerability in a SQLite INSERT statement where an attacker can craft a payload (using char(true+... ) encoding and ON CONFLICT UPSERT) to update another user’s email and potentially take over accounts; the author provides a PoC, filter-evasion details, and remediation advice in a single comprehensive write-up.