From 43f6cb15086cba8067fc9b53eb5e184e00ceecea Mon Sep 17 00:00:00 2001
From: Bernardo Damele <bernardo.damele@gmail.com>
Date: Thu, 19 Mar 2015 12:07:26 +0000
Subject: [PATCH] some more boundaries

---
 xml/boundaries.xml | 63 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)

diff --git a/xml/boundaries.xml b/xml/boundaries.xml
index f33498924..aa9e75eee 100644
--- a/xml/boundaries.xml
+++ b/xml/boundaries.xml
@@ -328,6 +328,42 @@ Formats:
         <suffix> AND '%'='</suffix>
     </boundary>
 
+    <boundary>
+        <level>4</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>2</ptype>
+        <prefix>%")</prefix>
+        <suffix> AND ("%"="</suffix>
+    </boundary>
+
+    <boundary>
+        <level>5</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>2</ptype>
+        <prefix>%"))</prefix>
+        <suffix> AND (("%"="</suffix>
+    </boundary>
+
+    <boundary>
+        <level>5</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>2</ptype>
+        <prefix>%")))</prefix>
+        <suffix> AND ((("%"="</suffix>
+    </boundary>
+
+    <boundary>
+        <level>3</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>2</ptype>
+        <prefix>%"</prefix>
+        <suffix> AND "%"="</suffix>
+    </boundary>
+
     <boundary>
         <level>5</level>
         <clause>1</clause>
@@ -337,6 +373,24 @@ Formats:
         <suffix> AND ('[RANDSTR]'='[RANDSTR]</suffix>
     </boundary>
 
+    <boundary>
+        <level>5</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>2</ptype>
+        <prefix>%00'))</prefix>
+        <suffix> AND (('[RANDSTR]'='[RANDSTR]</suffix>
+    </boundary>
+
+    <boundary>
+        <level>5</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>2</ptype>
+        <prefix>%00')))</prefix>
+        <suffix> AND ((('[RANDSTR]'='[RANDSTR]</suffix>
+    </boundary>
+
     <boundary>
         <level>4</level>
         <clause>1</clause>
@@ -354,6 +408,15 @@ Formats:
         <prefix></prefix>
         <suffix>-- [RANDSTR]</suffix>
     </boundary>
+
+    <boundary>
+        <level>3</level>
+        <clause>1</clause>
+        <where>1,2</where>
+        <ptype>1</ptype>
+        <prefix></prefix>
+        <suffix># [RANDSTR]</suffix>
+    </boundary>
     <!-- End of WHERE/HAVING clause boundaries -->
 
     <!-- Pre-WHERE generic boundaries (e.g. "UPDATE table SET '$_REQUEST["name"]' WHERE id=1" or "INSERT INTO table VALUES('$_REQUEST["value"]') WHERE id=1)"-->