sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 17:46:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

fixing few potential problems

Browse Source
This commit is contained in:
Miroslav Stampar 2012-02-29 13:56:40 +00:00
parent c39d85420a
commit d06182347f
3 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/core/common.py
View File

@ -2767,7 +2767,7 @@ def isNoneValue(value):
""" """
if isinstance(value, basestring): if isinstance(value, basestring):
return value == "None" return value in ("None", "")
elif isinstance(value, (list, tuple)): elif isinstance(value, (list, tuple)):
if len(value) == 1: if len(value) == 1:
return isNoneValue(value[0]) return isNoneValue(value[0])

7
plugins/dbms/mssqlserver/enumeration.py
View File

@ -135,9 +135,10 @@ class Enumeration(GenericEnumeration):
_ = (rootQuery.blind.query if query == rootQuery.blind.count else rootQuery.blind.query2 if query == rootQuery.blind.count2 else rootQuery.blind.query3).replace("%s", db) % index _ = (rootQuery.blind.query if query == rootQuery.blind.count else rootQuery.blind.query2 if query == rootQuery.blind.count2 else rootQuery.blind.query3).replace("%s", db) % index
table = inject.getValue(_, inband=False, error=False) table = inject.getValue(_, inband=False, error=False)
kb.hintValue = table if not isNoneValue(table):
table = safeSQLIdentificatorNaming(table, True) kb.hintValue = table
tables.append(table) table = safeSQLIdentificatorNaming(table, True)
tables.append(table)
if tables: if tables:
kb.data.cachedTables[db] = tables kb.data.cachedTables[db] = tables

2
plugins/generic/enumeration.py
View File

@ -1449,7 +1449,7 @@ class Enumeration:
value = inject.getValue(query, blind=False) value = inject.getValue(query, blind=False)
if column == colList[0]: if column == colList[0]:
if isNoneValue(value) or not value: if isNoneValue(value):
breakRetrieval = True breakRetrieval = True
break break
else: else: