sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-03-23 19:34:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

precaution

Browse Source
This commit is contained in:
Bernardo Damele 2010-11-29 09:54:30 +00:00
parent 9d7087e2ff
commit e8c6c01e27
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/core/agent.py
View File

@ -71,10 +71,10 @@ class Agent:
falseValue = " AND %d=%d" % (randInt, randInt + 1) falseValue = " AND %d=%d" % (randInt, randInt + 1)
# After identifing the injectable parameter # After identifing the injectable parameter
if kb.injection.place == PLACE.UA: if kb.injection.place == PLACE.UA and kb.injection.parameter:
retValue = kb.injection.parameter.replace(kb.injection.parameter, retValue = kb.injection.parameter.replace(kb.injection.parameter,
self.addPayloadDelimiters("%s%s" % (negValue, kb.injection.parameter + falseValue + newValue))) self.addPayloadDelimiters("%s%s" % (negValue, kb.injection.parameter + falseValue + newValue)))
elif kb.injection.parameter: elif kb.injection.place and kb.injection.parameter:
paramString = conf.parameters[kb.injection.place] paramString = conf.parameters[kb.injection.place]
paramDict = conf.paramDict[kb.injection.place] paramDict = conf.paramDict[kb.injection.place]
value = paramDict[kb.injection.parameter] value = paramDict[kb.injection.parameter]