diff --git a/lib/controller/checks.py b/lib/controller/checks.py index ab020b93c..378e27218 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -1005,11 +1005,10 @@ def heuristicCheckSqlInjection(place, parameter): logger.info(infoMsg) for match in re.finditer(FI_ERROR_REGEX, page or ""): - if randStr1.lower() in match.group(0).lower(): - infoMsg = "heuristic (FI) test shows that %s parameter " % paramType - infoMsg += "'%s' might be vulnerable to file inclusion attacks" % parameter - logger.info(infoMsg) - break + infoMsg = "heuristic (FI) test shows that %s parameter " % paramType + infoMsg += "'%s' might be vulnerable to file inclusion attacks" % parameter + logger.info(infoMsg) + break kb.heuristicMode = False