diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 44910f290..144c0e0f0 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -30,6 +30,7 @@ from lib.core.common import getSortedInjectionTests from lib.core.common import hashDBRetrieve from lib.core.common import hashDBWrite from lib.core.common import intersect +from lib.core.common import isDigit from lib.core.common import joinValue from lib.core.common import listToStrValue from lib.core.common import parseFilePaths @@ -117,7 +118,7 @@ def checkSqlInjection(place, parameter, value): threadData = getCurrentThreadData() # Favoring non-string specific boundaries in case of digit-like parameter values - if value.isdigit(): + if isDigit(value): kb.cache.intBoundaries = kb.cache.intBoundaries or sorted(copy.deepcopy(conf.boundaries), key=lambda boundary: any(_ in (boundary.prefix or "") or _ in (boundary.suffix or "") for _ in ('"', '\''))) boundaries = kb.cache.intBoundaries elif value.isalpha(): @@ -226,8 +227,8 @@ def checkSqlInjection(place, parameter, value): # Skip test if the user's wants to test only for a specific # technique if conf.technique and isinstance(conf.technique, list) and stype not in conf.technique: - debugMsg = "skipping test '%s' because the user " % title - debugMsg += "specified to test only for " + debugMsg = "skipping test '%s' because user " % title + debugMsg += "specified testing of only " debugMsg += "%s techniques" % " & ".join(PAYLOAD.SQLINJECTION[_] for _ in conf.technique) logger.debug(debugMsg) continue @@ -651,7 +652,7 @@ def checkSqlInjection(place, parameter, value): except SqlmapConnectionException as ex: debugMsg = "problem occurred most likely because the " debugMsg += "server hasn't recovered as expected from the " - debugMsg += "error-based payload used ('%s')" % getSafeExString(ex) + debugMsg += "used error-based payload ('%s')" % getSafeExString(ex) logger.debug(debugMsg) # In case of time-based blind or stacked queries diff --git a/lib/core/settings.py b/lib/core/settings.py index 8a5ae8048..44471302b 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -18,7 +18,7 @@ from lib.core.enums import OS from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.4.11.11" +VERSION = "1.4.11.12" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)