Você pode gostar...
search union all select null,null,null,null,null,null#
beijo grego
search%\' order by 1-- bzvi
search order by 1-- bnnp
search and 3003=3003
juliane cachoeiro
search\' and 3003=3003 and \'cwji\'=\'cwji
search\' union all select null,null,null,null,null-- opxc