From 2afc1e50219071f72f5ffdc753e4b6e92e1f0ebc Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Sun, 6 Feb 2011 15:28:23 +0000 Subject: [PATCH] Layout adjustments --- plugins/generic/filesystem.py | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/plugins/generic/filesystem.py b/plugins/generic/filesystem.py index d1bd719e2..f0f2a387d 100644 --- a/plugins/generic/filesystem.py +++ b/plugins/generic/filesystem.py @@ -277,6 +277,8 @@ class Filesystem: fileContent = self.unionReadFile(rFile) elif isTechniqueAvailable(PAYLOAD.TECHNIQUE.ERROR) and Backend.isDbms(DBMS.MYSQL): + # TODO: edit this as soon as the MySQL/trim/error-based bug + # is fixed errMsg = "file retrieval via error-based SQL injection will " errMsg += "be implemented soon" logger.error(errMsg) @@ -284,8 +286,8 @@ class Filesystem: return None else: errMsg = "none of the SQL injection techniques detected can " - errMsg += "be used to read files from the file system on " - errMsg += "%s" % Backend.getDbms() + errMsg += "be used to read files from the underlying file " + errMsg += "system of the back-end %s server" % Backend.getDbms() logger.error(errMsg) return None @@ -332,8 +334,8 @@ class Filesystem: self.unionWriteFile(wFile, dFile, fileType, confirm) else: errMsg = "none of the SQL injection techniques detected can " - errMsg += "be used to write files on the file system on " - errMsg += "%s" % Backend.getDbms() + errMsg += "be used to write files to the underlying file " + errMsg += "system of the back-end %s server" % Backend.getDbms() logger.error(errMsg) return None