sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-18 04:20:35 +03:00
Code Issues Packages Projects Releases Wiki Activity

bug fix for mssqlserver escape

Browse Source
This commit is contained in:
Miroslav Stampar 2011-04-20 13:41:01 +00:00
parent e4d3190f41
commit f909ecb369
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/dbms/mssqlserver/syntax.py
View File

@ -54,7 +54,7 @@ class Syntax(GenericSyntax):
break break
firstIndex = index firstIndex = index
index = expression[firstIndex:].find("))") index = expression[firstIndex:].find(")")
if index == -1: if index == -1:
raise sqlmapSyntaxException("Unenclosed ) in '%s'" % expression) raise sqlmapSyntaxException("Unenclosed ) in '%s'" % expression)
@ -63,9 +63,9 @@ class Syntax(GenericSyntax):
old = expression[firstIndex:lastIndex] old = expression[firstIndex:lastIndex]
oldUpper = old.upper() oldUpper = old.upper()
oldUpper = oldUpper.replace("CHAR(", "").replace(")", "") oldUpper = oldUpper.replace("CHAR(", "").replace(")", "")
oldUpper = oldUpper.split("+")
escaped = "'%s'" % "".join([chr(int(char)) for char in oldUpper]) escaped = "'%s'" % chr(int(oldUpper))
expression = expression.replace(old, escaped) expression = expression.replace(old, escaped)
expression = expression.replace("'+'", "")
return expression return expression