minor update

This commit is contained in:
Miroslav Stampar 2010-12-07 19:27:01 +00:00
parent 398b82644a
commit 575e50673b

View File

@ -356,8 +356,8 @@ def checkSqlInjection(place, parameter, value):
_ = Request.queryPage(reqPayload, place, noteResponseTime = False) _ = Request.queryPage(reqPayload, place, noteResponseTime = False)
duration = calculateDeltaSeconds(start) duration = calculateDeltaSeconds(start)
# 99.9999999997440% of all non-time affected durations # 99.9999999997440% of all non time-based sql injection
# should be inside 7*stdev(durations) # affected durations should be inside 7*stdev(durations)
# (Reference: http://www.answers.com/topic/standard-deviation) # (Reference: http://www.answers.com/topic/standard-deviation)
trueResult = (duration >= 7 * stdev(kb.responseTimes)) trueResult = (duration >= 7 * stdev(kb.responseTimes))