CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 06:50:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

sqlmap 0.6-rc5: major bug fix to make --sql-shell and --sql-query work properly also with mixed case statements (i.e oRDeR bY). Thanks Konrads Smelkovs to notifying.

Browse source
This commit is contained in:
Bernardo Damele 2009-01-28 14:53:11 +00:00
parent a8d57bb031
commit 6054090191
3 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
lib/core/common.py
View file

@ -498,7 +498,11 @@ def cleanQuery(query):
for sqlStatements in SQL_STATEMENTS.values():
for sqlStatement in sqlStatements:
upperQuery = upperQuery.replace(sqlStatement, sqlStatement.upper())
sqlStatementEsc = sqlStatement.replace("(", "\\(")
queryMatch = re.search("(%s)" % sqlStatementEsc, query, re.I)
if queryMatch:
upperQuery = upperQuery.replace(queryMatch.group(1), sqlStatement.upper())
return upperQuery

2
lib/core/settings.py
View file

@ -30,7 +30,7 @@ import sys
# sqlmap version and site
VERSION = "0.6.4-rc4"
VERSION = "0.6.4-rc5"
VERSION_STRING = "sqlmap/%s" % VERSION
SITE = "http://sqlmap.sourceforge.net"