sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 05:04:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

Refactoring (standardized with --search -C ...)

Browse Source
This commit is contained in:
Bernardo Damele 2011-06-08 16:39:41 +00:00
parent d160888784
commit 9126c84442
1 changed files with 4 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
plugins/generic/enumeration.py
View File

@ -1038,19 +1038,14 @@ class Enumeration:
infoMsg = "fetching columns "
if len(colList) > 0:
message = "do you want to use LIKE operator to "
message += "retrieve column names similar to the "
message += "ones provided with the -C option? [Y/n]"
colConsider, colCondParam = self.likeOrExact("column")
condQueryStr = "%%s%s" % colCondParam
condQuery = " AND (%s)" % " OR ".join(condQueryStr % (condition, unsafeSQLIdentificatorNaming(col)) for col in colList)
test = readInput(message, default="Y")
if not (isinstance(test, basestring) and test.upper() == "N"):
condQuery = " AND (%s)" % " OR ".join("%s LIKE '%%%s%%'" % (condition, unsafeSQLIdentificatorNaming(col)) for col in colList)
if colConsider == "1":
infoMsg += "LIKE '%s' " % ", ".join(unsafeSQLIdentificatorNaming(col) for col in colList)
else:
condQuery = " AND (%s)" % " OR ".join("%s = '%s'" % (condition, unsafeSQLIdentificatorNaming(col)) for col in colList)
infoMsg += "'%s' " % ", ".join(unsafeSQLIdentificatorNaming(col) for col in colList)
else:
condQuery = ""