From fec03cf6626425655328817bfcf1939d1db21000 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Miroslav=20=C5=A0tampar?= Date: Thu, 12 Nov 2026 14:28:47 +0100 Subject: [PATCH] Fix for --param-del being URL encoded in GET requests --- lib/core/settings.py | 2 +- lib/request/connect.py | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index e1dea6b20..8d4ab5070 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from thirdparty import six # sqlmap version (...) -VERSION = "1.10.11.29" +VERSION = "1.10.11.30" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/request/connect.py b/lib/request/connect.py index 338aab7d3..7834e9c17 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -500,7 +500,7 @@ class Connect(object): get = conf.parameters[PLACE.GET] if not conf.skipUrlEncode: - get = urlencode(get, limit=True) + get = urlencode(get, safe="%%&=-_%s" % (conf.paramDel or ""), limit=True) if get: if '?' in url: @@ -1678,7 +1678,7 @@ class Connect(object): cookie += "%s%s=%s" % (conf.cookieDel or DEFAULT_COOKIE_DELIMITER, name, entry) if not conf.skipUrlEncode: - get = urlencode(get, limit=True) + get = urlencode(get, safe="%%&=-_%s" % (conf.paramDel or ""), limit=True) if post is not None: if place not in (PLACE.POST, PLACE.CUSTOM_POST) and hasattr(post, UNENCODED_ORIGINAL_VALUE):