# Contains statements from jbrofuzz (13 April 2010)
1
1'1
1 exec sp_ (or exec xp_)
1 and 1=1
1' and 1=(select count(*) from tablenames); --