diff --git a/doc/ChangeLog b/doc/ChangeLog
index 38c633893..8ebecd164 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -27,7 +27,7 @@ sqlmap (0.6.4-1) stable; urgency=low
provided;
* Updated documentation.
- -- Bernardo Damele A. G. sqlmap user's manual
by
-Bernardo Damele A. G.
version 0.6.4, DDth of MMM 2009
+Bernardo Damele A. G.version 0.6.4, 3rd of February 2009
This document is the user's manual to use
sqlmap.
@@ -407,7 +407,7 @@ $ python sqlmap.py -h
sqlmap/0.6.4 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
and Daniele Bellucci <daniele.bellucci@gmail.com>
-
+
Usage: sqlmap.py [options]
Options:
@@ -3801,7 +3801,8 @@ back-end DBMS: PostgreSQL
sql> SELECT COUNT(name) FROM users
[10:11:57] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
[10:11:57] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
-[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
+[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32))
+FROM users
[10:11:59] [INFO] retrieved: 4
[10:11:59] [INFO] performed 13 queries in 0 seconds
SELECT COUNT(name) FROM users: '4'
@@ -3809,12 +3810,14 @@ SELECT COUNT(name) FROM users: '4'
sql> INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');
[10:12:35] [INFO] testing stacked queries support on parameter 'id'
[10:12:40] [INFO] the web application supports stacked queries on parameter 'id'
-[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');'
+[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname)
+VALUES (5, 'from', 'sql shell');'
[10:12:40] [INFO] done
sql> SELECT COUNT(name) FROM users
[10:12:51] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
[10:12:51] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
-[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
+[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32))
+FROM users
[10:12:53] [INFO] retrieved: 5
[10:12:54] [INFO] performed 20 queries in 0 seconds
SELECT COUNT(name) FROM users: '5'
@@ -3822,7 +3825,15 @@ SELECT COUNT(name) FROM users: '5'
TODO
+As you can see from this last example, when the user provides a SQL
+statement other than SELECT
, sqlmap recognizes it, tests if the
+web application supports stacked queries and in case it does, it executes
+the provided SQL statement in a multiple statement.
Beware that some web application technologies do not support stacked +queries on specific database management systems. For instance, PHP does not +support stacked queries when the back-end DBMS is MySQL, but it does +support when the back-end DBMS is PostgreSQL.
-TODO +As you can see from this last example, when the user provides a SQL +statement other than SELECT, sqlmap recognizes it, tests if the +web application supports stacked queries and in case it does, it executes +the provided SQL statement in a multiple statement. + +
+Beware that some web application technologies do not support stacked
+queries on specific database management systems. For instance, PHP does not
+support stacked queries when the back-end DBMS is MySQL, but it does
+support when the back-end DBMS is PostgreSQL.