mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-11-01 00:17:25 +03:00 
			
		
		
		
	added one more time request payload to confirm test results
This commit is contained in:
		
							parent
							
								
									e3fa3b0e8e
								
							
						
					
					
						commit
						323af45ce4
					
				|  | @ -341,10 +341,14 @@ def checkSqlInjection(place, parameter, value): | |||
|                         trueResult = Request.queryPage(reqPayload, place, timeBasedCompare=True) | ||||
| 
 | ||||
|                         if trueResult: | ||||
|                             infoMsg = "%s parameter '%s' is '%s' injectable " % (place, parameter, title) | ||||
|                             logger.info(infoMsg) | ||||
|                             # Confirm test's results | ||||
|                             trueResult = Request.queryPage(reqPayload, place, timeBasedCompare=True) | ||||
| 
 | ||||
|                             injectable = True | ||||
|                             if trueResult: | ||||
|                                 infoMsg = "%s parameter '%s' is '%s' injectable " % (place, parameter, title) | ||||
|                                 logger.info(infoMsg) | ||||
| 
 | ||||
|                                 injectable = True | ||||
| 
 | ||||
|                         # Restore value of socket timeout | ||||
|                         socket.setdefaulttimeout(popValue()) | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue
	
	Block a user