Thanks for replying.
Well, when I inject the query, I get the GDO Error (1064). I even tried the variations of the injection using * wildcard and also UNION, but failed.
And yes, I went through the source but it is way too hard to figure out the weakness in it since I am an absolute beginner.
I am looking for tutorials on the web though.
I'll keep trying.
But any further help or hint would be greatly appreciated considering me an absolute beginner.