sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 09:36:35 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor fix

Browse Source
This commit is contained in:
Miroslav Stampar 2012-10-28 00:19:00 +02:00
parent 0aeb9dbe8b
commit a435ba6863
4 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/request/inject.py
View File

@ -367,6 +367,7 @@ def getValue(expression, blind=True, inband=True, error=True, time=True, fromUse
through inband SQL injection (if selected) and/or blind SQL injection
(if selected).
"""
kb.safeCharEncode = safeCharEncode
kb.resumeValues = resumeValue

2
lib/utils/pivotdumptable.py
View File

@ -110,7 +110,7 @@ def pivotDumpTable(table, colList, count=None, blind=True):
else:
query = dumpNode.query2 % (column, table, colList[0], pivotValue)
value = unArrayizeValue(inject.getValue(query, blind=blind, inband=not blind, error=not blind))
value = unArrayizeValue(inject.getValue(query, blind=blind, time=blind, inband=not blind, error=not blind))
if column == colList[0]:
if isNoneValue(value):

2
plugins/generic/entries.py
View File

@ -147,7 +147,7 @@ class Entries:
if not (isTechniqueAvailable(PAYLOAD.TECHNIQUE.UNION) and kb.injection.data[PAYLOAD.TECHNIQUE.UNION].where == PAYLOAD.WHERE.ORIGINAL):
table = "%s.%s" % (conf.db, tbl)
retVal = pivotDumpTable(table, colList, blind=False, time=False)
retVal = pivotDumpTable(table, colList, blind=False)
if retVal:
entries, _ = retVal

2
plugins/generic/users.py
View File

@ -182,7 +182,7 @@ class Users:
randStr = randomStr()
getCurrentThreadData().disableStdOut = True
retVal = pivotDumpTable("(%s) AS %s" % (query, randStr), ['%s.name' % randStr, '%s.password' % randStr], blind=False, time=False)
retVal = pivotDumpTable("(%s) AS %s" % (query, randStr), ['%s.name' % randStr, '%s.password' % randStr], blind=False)
if retVal:
for user, password in filterPairValues(zip(retVal[0]["%s.name" % randStr], retVal[0]["%s.password" % randStr])):