diff --git a/doc/THANKS b/doc/THANKS index cc7ea3369..d3b655837 100644 --- a/doc/THANKS +++ b/doc/THANKS @@ -305,6 +305,9 @@ Truong Duc Luong Pavol Luptak for reporting a bug when injecting on a POST data parameter +Till Maas + for suggesting a minor feature + Michael Majchrowicz for extensively beta-testing sqlmap on various MySQL DBMS for providing really appreciated feedback diff --git a/lib/controller/controller.py b/lib/controller/controller.py index 11ddd7639..f8f9e0f79 100644 --- a/lib/controller/controller.py +++ b/lib/controller/controller.py @@ -129,15 +129,17 @@ def __formatInjection(inj): for stype, sdata in inj.data.items(): title = sdata.title + _ = sdata.vector if stype == PAYLOAD.TECHNIQUE.UNION: count = re.sub(r"\(.+\)", "", sdata.payload).count(",") + 1 title = re.sub(r"\d+ to \d+", str(count), title) + _ = agent.forgeInbandQuery("[QUERY]", _[0], _[1], _[2], _[3], _[4], _[5]) if count == 1: title = title.replace("columns", "column") data += " Type: %s\n" % PAYLOAD.SQLINJECTION[stype] data += " Title: %s\n" % title data += " Payload: %s\n" % (sdata.payload if stype != PAYLOAD.TECHNIQUE.TIME else sdata.payload.replace("[SLEEPTIME]", str(conf.timeSec))) - data += " Vector: %s\n" % sdata.vector if conf.verbose > 1 else "\n" + data += " Vector: %s\n\n" % _ if conf.verbose > 1 else "\n" return data