fixes for bugs reported by pragmatk@gmail.com

This commit is contained in:
Miroslav Stampar 2011-01-06 16:59:58 +00:00
parent c968b438f2
commit a8d660db54
4 changed files with 12 additions and 4 deletions

View File

@ -429,6 +429,9 @@ pacman730 <pacman730@users.sourceforge.net>
Phat R. <phatthanaphol@gmail.com> Phat R. <phatthanaphol@gmail.com>
for reporting a minor bug for reporting a minor bug
Joe "Pragmatk" <pragmatk@gmail.com>
for reporting a few bugs
shiftzwei <shiftzwei@gmail.com> shiftzwei <shiftzwei@gmail.com>
for reporting a couple of bugs for reporting a couple of bugs

View File

@ -507,7 +507,7 @@ def readInput(message, default=None):
data = default data = default
else: else:
data = raw_input(message.encode(sys.stdout.encoding)) data = raw_input(message.encode(sys.stdout.encoding or conf.dataEncoding))
if not data: if not data:
data = default data = default

View File

@ -511,8 +511,8 @@ def __setUnion():
debugMsg = "setting the UNION query SQL injection range of columns" debugMsg = "setting the UNION query SQL injection range of columns"
logger.debug(debugMsg) logger.debug(debugMsg)
if "-" not in conf.uCols: if "-" not in conf.uCols or len(conf.uCols.split("-")) != 2:
raise sqlmapSyntaxException, "--union-cols must be a range with hyphon" raise sqlmapSyntaxException, "--union-cols must be a range with hyphon (e.g. 1-10)"
conf.uCols = conf.uCols.replace(" ", "") conf.uCols = conf.uCols.replace(" ", "")
conf.uColsStart, conf.uColsStop = conf.uCols.split("-") conf.uColsStart, conf.uColsStop = conf.uCols.split("-")

View File

@ -8,6 +8,7 @@ See the file 'doc/COPYING' for copying permission
""" """
from lib.core.exception import sqlmapMissingDependence from lib.core.exception import sqlmapMissingDependence
from lib.core.exception import sqlmapValueException
class Replication: class Replication:
""" """
@ -62,7 +63,11 @@ class Replication:
""" """
This function is used for inserting row(s) into current table. This function is used for inserting row(s) into current table.
""" """
self.parent.cursor.execute('INSERT INTO %s VALUES (%s)' % (self.name, ','.join(['?']*len(values))), values) if len(values) == len(self.columns):
self.parent.cursor.execute('INSERT INTO %s VALUES (%s)' % (self.name, ','.join(['?']*len(values))), values)
else:
errMsg = "wrong number of columns used in replicating insert"
raise sqlmapValueException, errMsg
def select(self, condition=None): def select(self, condition=None):
""" """