titolo%bf%27, (SELECT password FROM users WHERE id=1), 1) -- - now has -1 karma