Você pode gostar...
search\' order by 1-- xued
search union all select null,null,null,null,null,null,null-- zvmn
(select concat(0x716b716a71,(select (elt(2196=2196,1))),0x7178786b71))
search\') and sleep(5) and (\'qoty\'=\'qoty
search\' order by 1-- yqta
search) waitfor delay \'0:0:5\' and (3904=3904
search and 3022=3022-- rucw
na cara