From ee4e04ebca6a9a913889d75c6dcfd83b4f0f92e1 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Mon, 29 Nov 2010 15:09:40 +0000 Subject: [PATCH] Minor adjustment --- lib/controller/checks.py | 2 +- lib/controller/controller.py | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 76aa18a50..c1549d0ec 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -149,7 +149,7 @@ def checkSqlInjection(place, parameter, value): boundary.prefix = conf.prefix boundary.suffix = conf.suffix - if "like" in boundary.suffix.lower(): + if " like" in boundary.suffix.lower(): if "'" in boundary.suffix.lower(): boundary.ptype = 3 elif '"' in boundary.suffix.lower(): diff --git a/lib/controller/controller.py b/lib/controller/controller.py index eac4320b5..391fbf72f 100644 --- a/lib/controller/controller.py +++ b/lib/controller/controller.py @@ -342,8 +342,6 @@ def start(): kb.testedParams.add(paramKey) if testSqlInj: - # TODO: with the new detection engine, review this - # part. This will be moved to payloads.xml as well heuristicCheckSqlInjection(place, parameter, value) logMsg = "testing sql injection on %s " % place