CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Code cleanup

Browse source
This commit is contained in:
Bernardo Damele 2011-02-06 22:32:44 +00:00
parent ecaf5729fd
commit f3d6be7868
3 changed files with 19 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/core/settings.py
View file

@ -249,3 +249,6 @@ URI_INJECTION_MARK_CHAR = '*'
# Maximum length used for retrieving data over MySQL error based payload due to "known" problems with longer result strings
MYSQL_ERROR_TRIM_LENGTH = 100
#
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ")

14
lib/core/unescaper.py
View file

@ -9,16 +9,20 @@ See the file 'doc/COPYING' for copying permission
from lib.core.common import Backend
from lib.core.datatype import advancedDict
from lib.core.settings import EXCLUDE_UNESCAPE
class Unescaper(advancedDict):
def unescape(self, expression, quote=True, dbms=None):
if expression is None:
return expression
for exclude in EXCLUDE_UNESCAPE:
if exclude in expression:
return expression
identifiedDbms = Backend.getIdentifiedDbms()
if not expression:
return expression
elif "WAITFOR DELAY " in expression:
return expression
elif dbms is not None:
if dbms is not None:
return self[dbms](expression, quote=quote)
elif identifiedDbms is not None:
return self[identifiedDbms](expression, quote=quote)