Create quotetodollars.py

tamper/quotetodollars.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python
+
+"""
+Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
+See the file 'LICENSE' for copying permission
+"""
+
+from lib.core.enums import PRIORITY
+
+__priority__ = PRIORITY.NORMAL
+
+def dependencies():
+    pass
+
+def tamper(payload, **kwargs):
+    """
+    Tested on PostgreSQL 12.0
+    
+    Replace single and double quotes with dollar signs (e.g. ' -> $$)
+    
+    >>> tamper("1' or '1'='1")
+    "1$$ or $$1$$=$$1"
+    """
+
+    return payload.replace("'", "$$'").replace('"', '$$')