From dea15b5892e2448329947ba8d5da655f67ff03f9 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Tue, 22 Jan 2013 18:28:48 +0000 Subject: [PATCH] notify user if --udf-inject is provided but no stacked queries SQLi is detected --- lib/takeover/udf.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/lib/takeover/udf.py b/lib/takeover/udf.py index cb91154c2..6f4868efd 100644 --- a/lib/takeover/udf.py +++ b/lib/takeover/udf.py @@ -165,10 +165,13 @@ class UDF: def udfInjectCustom(self): if Backend.getIdentifiedDbms() not in (DBMS.MYSQL, DBMS.PGSQL): - errMsg = "UDF injection feature is not yet implemented on %s" % Backend.getIdentifiedDbms() - raise SqlmapUnsupportedFeatureException(errMsg) + errMsg = "UDF injection feature only works on MySQL and PostgreSQL" + logger.error(errMsg) + return if not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct: + errMsg = "UDF injection feature requires stacked queries SQL injection" + logger.error(errMsg) return self.checkDbmsOs()