Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158. This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module).

Minor layout adjustments.

lib/core/target.py

@@ -43,6 +43,10 @@ def __setRequestParams():
     HTTP method POST.
     """
 
+    if conf.direct:
+        conf.parameters[None] = "direct connection"
+        return
+
     __testableParameters = False
 
     # Perform checks on GET parameters