sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-11-04 09:57:38 +03:00
Code Issues Packages Projects Releases Wiki Activity

minor fix

Browse Source
This commit is contained in:
Miroslav Stampar 2011-03-26 05:55:49 +00:00
parent 58f8703ecd
commit 04c4578df7
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
plugins/generic/enumeration.py
View File

@ -1212,11 +1212,15 @@ class Enumeration:
Returns an safe representation of SQL identificator name Returns an safe representation of SQL identificator name
""" """
retVal = value retVal = value
if isinstance(value, basestring) and not re.match(r"\A[A-Za-z0-9_]+\Z", value): if isinstance(value, basestring):
parts = value.split('.')
for i in range(len(parts)):
if not re.match(r"\A[A-Za-z0-9_]+\Z", parts[i]):
if Backend.getIdentifiedDbms() in (DBMS.MYSQL, DBMS.ACCESS): if Backend.getIdentifiedDbms() in (DBMS.MYSQL, DBMS.ACCESS):
retVal = "`%s`" % value.strip("`") parts[i] = "`%s`" % parts[i].strip("`")
elif Backend.getIdentifiedDbms() in (DBMS.MSSQL, DBMS.ORACLE, DBMS.PGSQL): elif Backend.getIdentifiedDbms() in (DBMS.MSSQL, DBMS.ORACLE, DBMS.PGSQL):
retVal = "\"%s\"" % value.strip("\"") parts[i] = "\"%s\"" % parts[i].strip("\"")
retVal = ".".join(parts)
return retVal return retVal
def dumpTable(self): def dumpTable(self):