sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-17 03:50:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

trust me, i know what i am doing :)

Browse Source
This commit is contained in:
Miroslav Stampar 2010-11-07 20:33:33 +00:00
parent 73e85bfc75
commit 620fa1c8fb
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/controller/controller.py
View File

@ -217,6 +217,8 @@ def start():
testSqlInj = True testSqlInj = True
paramKey = (conf.hostname, conf.path, place, parameter) paramKey = (conf.hostname, conf.path, place, parameter)
conf.matchRatio = None
if paramKey in kb.testedParams: if paramKey in kb.testedParams:
testSqlInj = False testSqlInj = False
@ -242,14 +244,14 @@ def start():
if testSqlInj: if testSqlInj:
heuristicCheckSqlInjection(place, parameter, value) heuristicCheckSqlInjection(place, parameter, value)
conf.matchRatio = None
for parenthesis in range(0, 4): for parenthesis in range(0, 4):
logMsg = "testing sql injection on %s " % place logMsg = "testing sql injection on %s " % place
logMsg += "parameter '%s' with " % parameter logMsg += "parameter '%s' with " % parameter
logMsg += "%d parenthesis" % parenthesis logMsg += "%d parenthesis" % parenthesis
logger.info(logMsg) logger.info(logMsg)
conf.matchRatio = None
injType = checkSqlInjection(place, parameter, value, parenthesis) injType = checkSqlInjection(place, parameter, value, parenthesis)
if injType: if injType:

8
lib/request/comparison.py
View File

@ -20,6 +20,10 @@ def comparison(page, headers=None, getSeqMatcher=False, pageLength=None):
if page is None and pageLength is None: if page is None and pageLength is None:
return None return None
# In case of an DBMS error page return None
if wasLastRequestError():
return None
regExpResults = None regExpResults = None
if page: if page:
@ -105,10 +109,6 @@ def comparison(page, headers=None, getSeqMatcher=False, pageLength=None):
if getSeqMatcher: if getSeqMatcher:
return ratio return ratio
# In case of an DBMS error page return None
elif wasLastRequestError():
return None
elif ratio == 1: elif ratio == 1:
return True return True