Você pode gostar...
search\') order by 1#
search\') and sleep(5) and (\'cqzh\'=\'cqzh
search) union all select null-- jmny
search union all select null-- gcog
search order by 1-- daeu
ines lenvin
rebecca rios
marcia imperator