From 2dc570d7a8f2e161f4757570a93740cb37b1b447 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 10 Oct 2013 23:08:20 +0200 Subject: [PATCH] Minor patch (for ORDER BY 'col' cases) --- lib/controller/checks.py | 3 +++ xml/payloads.xml | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 4b7b0c838..3fb0f5873 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -489,6 +489,9 @@ def checkSqlInjection(place, parameter, value): kb.previousMethod = method + if conf.dummy: + injectable = False + # If the injection test was successful feed the injection # object with the test's details if injectable is True: diff --git a/xml/payloads.xml b/xml/payloads.xml index c8e304d62..476c983b0 100644 --- a/xml/payloads.xml +++ b/xml/payloads.xml @@ -250,7 +250,7 @@ Formats: 3 - 1 + 1,2,3 1,2 2 '