diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 76aa18a50..c1549d0ec 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -149,7 +149,7 @@ def checkSqlInjection(place, parameter, value): boundary.prefix = conf.prefix boundary.suffix = conf.suffix - if "like" in boundary.suffix.lower(): + if " like" in boundary.suffix.lower(): if "'" in boundary.suffix.lower(): boundary.ptype = 3 elif '"' in boundary.suffix.lower(): diff --git a/lib/controller/controller.py b/lib/controller/controller.py index eac4320b5..391fbf72f 100644 --- a/lib/controller/controller.py +++ b/lib/controller/controller.py @@ -342,8 +342,6 @@ def start(): kb.testedParams.add(paramKey) if testSqlInj: - # TODO: with the new detection engine, review this - # part. This will be moved to payloads.xml as well heuristicCheckSqlInjection(place, parameter, value) logMsg = "testing sql injection on %s " % place