發信站NCTU CSIE FreeBSD Server (Sun Apr 15 08:28:50 2007)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
There is no SQL injection being performed on that page, the proof of concept script simple grabs any 32 character string from the page, the one in question happens to be a logout hash.
The logout hash is used to mitigate a CSRF.