sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 05:04:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix for an Issue #137

Browse Source
This commit is contained in:
Miroslav Stampar 2012-08-16 22:20:24 +02:00
parent 0d8fca30c9
commit 4649450603
3 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/core/option.py
View File

@ -1555,7 +1555,6 @@ def __setKnowledgeBaseAttributes(flushAll=True):
kb.threadException = False kb.threadException = False
kb.timeValidCharsRun = 0 kb.timeValidCharsRun = 0
kb.uChar = NULL kb.uChar = NULL
kb.unescape = True
kb.unionDuplicates = False kb.unionDuplicates = False
kb.xpCmdshellAvailable = False kb.xpCmdshellAvailable = False

2
lib/core/unescaper.py
View File

@ -13,7 +13,7 @@ from lib.core.settings import EXCLUDE_UNESCAPE
class Unescaper(AttribDict): class Unescaper(AttribDict):
def unescape(self, expression, quote=True, dbms=None): def unescape(self, expression, quote=True, dbms=None):
if not kb.unescape or conf.noUnescape: if conf.noUnescape:
return expression return expression
if expression is None: if expression is None:

6
plugins/generic/custom.py
View File

@ -34,7 +34,6 @@ class Custom:
output = None output = None
sqlType = None sqlType = None
query = query.rstrip(';') query = query.rstrip(';')
kb.unescape = False
for sqlTitle, sqlStatements in SQL_STATEMENTS.items(): for sqlTitle, sqlStatements in SQL_STATEMENTS.items():
for sqlStatement in sqlStatements: for sqlStatement in sqlStatements:
@ -47,7 +46,6 @@ class Custom:
logger.info(infoMsg) logger.info(infoMsg)
output = inject.getValue(query, fromUser=True) output = inject.getValue(query, fromUser=True)
kb.unescape = True
return output return output
elif not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct: elif not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
@ -55,8 +53,6 @@ class Custom:
warnMsg += "available when stacked queries are supported" warnMsg += "available when stacked queries are supported"
logger.warn(warnMsg) logger.warn(warnMsg)
kb.unescape = True
return None return None
else: else:
if sqlType: if sqlType:
@ -72,8 +68,6 @@ class Custom:
output = False output = False
kb.unescape = True
return output return output
def sqlShell(self): def sqlShell(self):