sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 05:04:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

Patch for an Issue #235

Browse Source
This commit is contained in:
Miroslav Stampar 2012-11-10 11:01:29 +01:00
parent 181c3534f0
commit f305dde413
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/core/option.py
View File

@ -835,6 +835,7 @@ def __setTamperingFunctions():
if name == "tamper" and function.func_code.co_argcount == 2: if name == "tamper" and function.func_code.co_argcount == 2:
found = True found = True
kb.tamperFunctions.append(function) kb.tamperFunctions.append(function)
function.func_name = module.__name__
if check_priority and priority > last_priority: if check_priority and priority > last_priority:
message = "it seems that you might have mixed " message = "it seems that you might have mixed "

6
lib/request/connect.py
View File

@ -53,6 +53,7 @@ from lib.core.enums import REDIRECTION
from lib.core.exception import sqlmapCompressionException from lib.core.exception import sqlmapCompressionException
from lib.core.exception import sqlmapConnectionException from lib.core.exception import sqlmapConnectionException
from lib.core.exception import sqlmapSyntaxException from lib.core.exception import sqlmapSyntaxException
from lib.core.exception import sqlmapValueException
from lib.core.settings import CUSTOM_INJECTION_MARK_CHAR from lib.core.settings import CUSTOM_INJECTION_MARK_CHAR
from lib.core.settings import DEFAULT_CONTENT_TYPE from lib.core.settings import DEFAULT_CONTENT_TYPE
from lib.core.settings import HTTP_ACCEPT_HEADER_VALUE from lib.core.settings import HTTP_ACCEPT_HEADER_VALUE
@ -588,6 +589,10 @@ class Connect:
if kb.tamperFunctions: if kb.tamperFunctions:
for function in kb.tamperFunctions: for function in kb.tamperFunctions:
payload = function(payload=payload, headers=auxHeaders) payload = function(payload=payload, headers=auxHeaders)
if not isinstance(payload, basestring):
errMsg = "tamper function '%s' returns " % function.func_name
errMsg += "invalid payload type ('%s')" % type(payload)
raise sqlmapValueException, errMsg
value = agent.replacePayload(value, payload) value = agent.replacePayload(value, payload)
@ -722,6 +727,7 @@ class Connect:
warnMsg += "value for option '--time-sec' as possible (e.g. " warnMsg += "value for option '--time-sec' as possible (e.g. "
warnMsg += "%d or more)" % (conf.timeSec * 2) warnMsg += "%d or more)" % (conf.timeSec * 2)
logger.critical(warnMsg) logger.critical(warnMsg)
elif not kb.testMode: elif not kb.testMode:
warnMsg = "it is very important not to stress the network adapter's " warnMsg = "it is very important not to stress the network adapter's "
warnMsg += "bandwidth during usage of time-based queries" warnMsg += "bandwidth during usage of time-based queries"