Solved after the CTF has ended!
*In Vietnamese, you can use google translate!

Original writeup (https://www.facebook.com/notes/nguyễn-tiến-giang/bctf-2018-babyweb-writeup-2315/1925553980891891/).