I don't know if using sql injection is the right thing to do... It's been a few hours, I don't know lol

The injection was successful by loosening the WAF test to “email” in `/home.php', but I don't have a sense of how to proceed later. Since waf doesn't filter regdate, I think the flag can be extracted with regdate, but... Unfortunately, it didn't work out. Give me a hint/direction of progress

Why is that not an answer? I extracted a BISC {} format flag from Comment...