Re: RE: Re: about oracle sql injection

hey thanks for your answer,by the way my problem is not a blind,because the 
server return error messages,but thier is  a filter that denied the 
command:(union select)

so i try to put a comment to bypass the signature,or make a url encoding,or 
pipe,but its still dosent working,so my question:there is more ways to bypass 
the signture (union select)??????????

if there is any guys that have some nice ideas to bypass the signature,its will 
be great


thanks