You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'A=0'A=0''') AND 1=1 UNION ALL SELECT 1,NULL,'alert(''A=0'A=0'A=0'A=0',search_dat' at line 1