Minor bug fix to make the Partial UNION query SQL injection technique

work properly also on Oracle and Microsoft SQL Server.
2026-08-03 22:31:34 +00:00 · 2008-12-22 22:48:44 +00:00 · 2008-12-22 22:48:44 +00:00 · 64bb57d786
commit 64bb57d786
parent 1f7810e46a
5 changed files with 24 additions and 19 deletions
--- a/lib/core/settings.py
+++ b/lib/core/settings.py
@ -74,6 +74,7 @@ SQL_STATEMENTS    = {
                      "SQL SELECT statement":  (
                             "select ",
                             " from ",
+                             " from dual",
                             " where ",
                             " group by ",
                             " order by ",