sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 19:13:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor adjustments

Browse Source
This commit is contained in:
Bernardo Damele 2008-12-30 21:24:01 +00:00
parent a4d62af2ea
commit c1010c20d8
3 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/ChangeLog
View File

@ -16,12 +16,14 @@ sqlmap (0.6.4-1) stable; urgency=low
* Added internal support to forge CASE statements, used only by --is-dba * Added internal support to forge CASE statements, used only by --is-dba
query at the moment; query at the moment;
* Minor layout adjustment to the --update output; * Minor layout adjustment to the --update output;
* Increased default timeout to 30 seconds;
* Major bug fix to avoid tracebacks when multiple targets are specified * Major bug fix to avoid tracebacks when multiple targets are specified
and one of them is not reachable; and one of them is not reachable;
* Minor bug fix to make the Partial UNION query SQL injection technique * Minor bug fix to make the Partial UNION query SQL injection technique
work properly also on Oracle and Microsoft SQL Server; work properly also on Oracle and Microsoft SQL Server;
* Minor bug fix to make the --postfix work even if --prefix is not * Minor bug fix to make the --postfix work even if --prefix is not
provided; provided;
* Updated documentation.
-- Bernardo Damele A. G. <bernardo.damele@gmail.com> Day, DD MMM 2009 10:00:00 +0000 -- Bernardo Damele A. G. <bernardo.damele@gmail.com> Day, DD MMM 2009 10:00:00 +0000

2
lib/core/session.py
View File

@ -129,6 +129,8 @@ def setDbms(dbms):
kb.dbms = dbms kb.dbms = dbms
logger.info("the back-end DBMS is %s" % kb.dbms)
def setUnion(comment=None, count=None, position=None): def setUnion(comment=None, count=None, position=None):
""" """

2
plugins/dbms/mysql.py
View File

@ -257,7 +257,7 @@ class MySQLMap(Fingerprint, Enumeration, Filesystem, Takeover):
logMsg = "confirming MySQL" logMsg = "confirming MySQL"
logger.info(logMsg) logger.info(logMsg)
payload = agent.fullPayload(" AND CONCAT('%s', '%s')='%s%s'" % (randInt, randInt, randInt, randInt)) payload = agent.fullPayload(" AND ISNULL(1/0)")
result = Request.queryPage(payload) result = Request.queryPage(payload)
if result != True: if result != True: