sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-09 08:00:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

More explicit function name also getRatioValue parameter has nothing to do with comparison at this stage as far as I can see (that might have fixed another "bug", to be checked later)

Browse Source
This commit is contained in:
Bernardo Damele 2012-03-15 16:29:28 +00:00
parent 4520744b4d
commit cc15373769
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
lib/request/comparison.py
View File

@ -35,24 +35,23 @@ def comparison(page, headers, code=None, getRatioValue=False, pageLength=None):
seqMatcher = getCurrentThreadData().seqMatcher seqMatcher = getCurrentThreadData().seqMatcher
seqMatcher.set_seq1(kb.pageTemplate) seqMatcher.set_seq1(kb.pageTemplate)
def _(condition): def checkNegativeLogic(condition):
condition = not condition if kb.negativeLogic else condition return not condition if kb.negativeLogic else condition
return condition if not getRatioValue else (MAX_RATIO if condition else MIN_RATIO)
if any([conf.string, conf.regexp]): if any([conf.string, conf.regexp]):
rawResponse = "%s%s" % (listToStrValue(headers.headers if headers else ""), page) rawResponse = "%s%s" % (listToStrValue(headers.headers if headers else ""), page)
# String to match in page when the query is valid # String to match in page when the query is valid
if conf.string: if conf.string:
return _(conf.string in rawResponse) return checkNegativeLogic(conf.string in rawResponse)
# Regular expression to match in page when the query is valid # Regular expression to match in page when the query is valid
if conf.regexp: if conf.regexp:
return _(re.search(conf.regexp, rawResponse, re.I | re.M) is not None) return checkNegativeLogic(re.search(conf.regexp, rawResponse, re.I | re.M) is not None)
# HTTP code to match when the query is valid # HTTP code to match when the query is valid
if isinstance(code, int) and conf.code: if isinstance(code, int) and conf.code:
return _(conf.code == code) return checkNegativeLogic(conf.code == code)
if page: if page:
# In case of an DBMS error page return None # In case of an DBMS error page return None