buy.php') AND 4428=4428 AND ('pnkt'='pnkt