From 6c80f2903b82e2f16e03d2b6b3a5da97d9fee515 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Fri, 27 Dec 2013 11:02:59 +0100 Subject: [PATCH] Patch for an Issue #564 --- lib/controller/checks.py | 2 +- lib/core/agent.py | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 122e02f80..fe1713c32 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -322,7 +322,7 @@ def checkSqlInjection(place, parameter, value): # Threat the parameter original value according to the # test's tag - if where == PAYLOAD.WHERE.ORIGINAL: + if where == PAYLOAD.WHERE.ORIGINAL or conf.prefix: origValue = value elif where == PAYLOAD.WHERE.NEGATIVE: # Use different page template than the original diff --git a/lib/core/agent.py b/lib/core/agent.py index b710aaa44..c512cec75 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -108,6 +108,9 @@ class Agent(object): origValue = origValue.split(CUSTOM_INJECTION_MARK_CHAR)[0] origValue = origValue[origValue.index(',') + 1:] + if conf.prefix: + value = origValue + if value is None: if where == PAYLOAD.WHERE.ORIGINAL: value = origValue