unmagicquotes: add ref

This commit is contained in:
Alexandre ZANNI 2021-04-06 14:03:16 +02:00 committed by GitHub
parent 732b9670d2
commit a4227e8333
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -24,6 +24,7 @@ def tamper(payload, **kwargs):
Reference: Reference:
* http://shiflett.org/blog/2006/jan/addslashes-versus-mysql-real-escape-string * http://shiflett.org/blog/2006/jan/addslashes-versus-mysql-real-escape-string
* https://lonewolfzero.wordpress.com/2017/07/03/addslashes-multibyte-sql-injection-mysql-and-php-case-study/
>>> tamper("1' AND 1=1") >>> tamper("1' AND 1=1")
'1%bf%27-- -' '1%bf%27-- -'