diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 3af3adc4a..4aa005d10 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -454,10 +454,6 @@ def checkSqlInjection(place, parameter, value): warnMsg += "explicitly set it using option '--dbms'" singleTimeWarnMessage(warnMsg) else: - warnMsg = "heuristic test showed that the back-end DBMS " - warnMsg += "could be '%s' " % kb.heuristicDbms - singleTimeWarnMessage(warnMsg) - Backend.forceDbms(kb.heuristicDbms) if unionExtended: @@ -614,6 +610,11 @@ def heuristicCheckDbms(injection): Backend.flushForcedDbms() kb.injection = popValue() + if retVal: + infoMsg = "heuristic test showed that the back-end DBMS " + infoMsg += "could be '%s' " % retVal + logger.info(infoMsg) + return retVal def checkFalsePositives(injection): diff --git a/lib/core/settings.py b/lib/core/settings.py index 22dc012c6..322e2c174 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -462,7 +462,7 @@ VALID_TIME_CHARS_RUN_THRESHOLD = 100 CHECK_ZERO_COLUMNS_THRESHOLD = 10 # Boldify all logger messages containing these "patterns" -BOLD_PATTERNS = ("' injectable", "might be injectable", "' is vulnerable", "is not injectable", "test failed", "test passed", "live test final result") +BOLD_PATTERNS = ("' injectable", "might be injectable", "' is vulnerable", "is not injectable", "test failed", "test passed", "live test final result", "heuristic test showed") # Generic www root directory names GENERIC_DOC_ROOT_DIRECTORY_NAMES = ("htdocs", "wwwroot", "www")