minor update

This commit is contained in:
Miroslav Stampar 2011-10-23 08:44:21 +00:00
parent 25f0ec3597
commit 1c3f4e9e54

View File

@ -270,10 +270,17 @@ def __unionTestByCharBruteforce(comment, place, parameter, value, prefix, suffix
validPayload, vector = __unionConfirm(comment, place, parameter, value, prefix, suffix, count)
if not all([validPayload, vector]) and not conf.uChar:
if not all([validPayload, vector]) and not all([conf.uChar, conf.dbms]):
warnMsg = "if UNION based SQL injection is not detected, "
warnMsg += "please consider providing --union-char switch "
warnMsg += "(e.g. --union-char=1) and/or try to force the "
warnMsg += "please consider "
if not conf.uChar:
warnMsg += "providing --union-char switch "
warnMsg += "(e.g. --union-char=1)"
if not conf.dbms:
if not conf.uChar:
warnMsg += "and/or try to force the "
else:
warnMsg += "forcing the "
warnMsg += "back-end DBMS (e.g. --dbms=mysql) "
singleTimeWarnMessage(warnMsg)