2019-05-08 13:47:52 +03:00
#!/usr/bin/env python
2018-10-16 13:23:07 +03:00
"""
2020-01-01 15:25:15 +03:00
Copyright ( c ) 2006 - 2020 sqlmap developers ( http : / / sqlmap . org / )
2018-10-16 13:23:07 +03:00
See the file ' LICENSE ' for copying permission
"""
2019-05-03 14:20:15 +03:00
from lib . core . convert import getOrds
2018-10-16 13:23:07 +03:00
from plugins . generic . syntax import Syntax as GenericSyntax
class Syntax ( GenericSyntax ) :
@staticmethod
def escape ( expression , quote = True ) :
"""
2019-05-02 13:39:16 +03:00
>> > Syntax . escape ( " SELECT ' abcdefgh ' FROM foobar " ) == " SELECT CHAR(97)||CHAR(98)||CHAR(99)||CHAR(100)||CHAR(101)||CHAR(102)||CHAR(103)||CHAR(104) FROM foobar "
True
2018-10-16 13:23:07 +03:00
"""
def escaper ( value ) :
2019-05-02 13:39:16 +03:00
return " || " . join ( " CHAR( %d ) " % _ for _ in getOrds ( value ) )
2018-10-16 13:23:07 +03:00
return Syntax . _escape ( expression , quote , escaper )