sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-26 03:23:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

notify user if --udf-inject is provided but no stacked queries SQLi is detected

Browse Source
This commit is contained in:
Bernardo Damele 2013-01-22 18:28:48 +00:00
parent d6a361f859
commit dea15b5892
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/takeover/udf.py
View File

@ -165,10 +165,13 @@ class UDF:
def udfInjectCustom(self): def udfInjectCustom(self):
if Backend.getIdentifiedDbms() not in (DBMS.MYSQL, DBMS.PGSQL): if Backend.getIdentifiedDbms() not in (DBMS.MYSQL, DBMS.PGSQL):
errMsg = "UDF injection feature is not yet implemented on %s" % Backend.getIdentifiedDbms() errMsg = "UDF injection feature only works on MySQL and PostgreSQL"
raise SqlmapUnsupportedFeatureException(errMsg) logger.error(errMsg)
return
if not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct: if not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
errMsg = "UDF injection feature requires stacked queries SQL injection"
logger.error(errMsg)
return return
self.checkDbmsOs() self.checkDbmsOs()