Block a user
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1128710278')))>'0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1333060954')))
123456/**/and/**/cast(md5('1847305966')as/**/int)>0
123456'and(select'1'from/**/cast(md5(1347369026)as/**/int))>'0