From 661b44135d68fc184f7dfaa222ef05b23ec59f45 Mon Sep 17 00:00:00 2001 From: stamparm Date: Wed, 10 Apr 2013 11:59:07 +0200 Subject: [PATCH] Minor bug fix --- lib/controller/controller.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/controller/controller.py b/lib/controller/controller.py index 8b0f4f405..e9930ea61 100644 --- a/lib/controller/controller.py +++ b/lib/controller/controller.py @@ -276,7 +276,7 @@ def start(): testSqlInj = False if PLACE.GET in conf.parameters and not any([conf.data, conf.testParameter]): - for parameter in re.findall(r"([^=]+)=([^%s]+%s?|\Z)" % (conf.pDel or ";", conf.pDel or ";"), conf.parameters[PLACE.GET]): + for parameter in re.findall(r"([^=]+)=([^%s]+%s?|\Z)" % (conf.pDel or DEFAULT_GET_POST_DELIMITER, conf.pDel or DEFAULT_GET_POST_DELIMITER), conf.parameters[PLACE.GET]): paramKey = (conf.hostname, conf.path, PLACE.GET, parameter[0]) if paramKey not in kb.testedParams: @@ -287,7 +287,6 @@ def start(): if paramKey not in kb.testedParams: testSqlInj = True - testSqlInj &= (conf.hostname, conf.path, None, None) not in kb.testedParams testSqlInj &= conf.hostname not in kb.vulnHosts if not testSqlInj: