concat(title,keyword,description) like '%selected 100 polyester carpets and rugs%'  and catid NOT IN (4,6)sql inject