Você pode gostar...
barely legal
search union all select null,null,null-- bjck
search\' and sleep(5) and \'fpdi\'=\'fpdi
search union all select null,null,null,null,null,null,null#
search\' order by 1#
search%\' order by 1#
bare legal
search%\';select sleep(5)#