Você pode gostar...
search%\' and 6370=(select 6370 from pg_sleep(5)) and \'%\'=\'
search\' and 4972=4972 and \'stsd\'=\'stsd
search\') and 2009=2009 and (\'hvxm\'=\'hvxm
search order by 1-- kcot
search\' waitfor delay \'0:0:5\' and \'uhyf\'=\'uhyf
search union all select null,null,null,null-- oygj
search) union all select null,null-- aebf
de m