Dream Badge

The approach I've tried Do you infer the admin key in the cookie and enter it? Is there a way to inject admin into the session? I don't know no matter how I try, how should I approach it?

I tried SQL Injection, but it didn't seem to work because it was blocked due to preparation, and since bot.js has a path called bot, I tried to go there but it failed. How should I approach it??

I'm trying to copy the value of fetch admin when I created a guest and logged in, but I can't paste fetch into the console. There was an error... how can I access it in a different way..?