minor improvement for --sql-shell/--sql-query (when non-SELECT default is N for retrieve data output which automatically does STACKED injection)

This commit is contained in:
Miroslav Stampar 2011-05-01 21:41:14 +00:00
parent 900ee0ff93
commit 8e8886cd20

View File

@ -2230,8 +2230,13 @@ class Enumeration:
if not self.alwaysRetrieveSqlOutput:
message = "do you want to retrieve the SQL statement output? "
if not sqlType or 'SELECT' in sqlType:
message += "[Y/n/a] "
getOutput = readInput(message, default="Y")
else:
message += "[y/N/a] "
getOutput = readInput(message, default="N")
if getOutput in ("a", "A"):
self.alwaysRetrieveSqlOutput = True