sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-29 04:53:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

bug fix for mssqlserver escape

Browse Source
This commit is contained in:
Miroslav Stampar 2011-04-20 13:41:01 +00:00
parent e4d3190f41
commit f909ecb369
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/dbms/mssqlserver/syntax.py
View File

@ -54,7 +54,7 @@ class Syntax(GenericSyntax):
break
firstIndex = index
index = expression[firstIndex:].find("))")
index = expression[firstIndex:].find(")")
if index == -1:
raise sqlmapSyntaxException("Unenclosed ) in '%s'" % expression)
@ -63,9 +63,9 @@ class Syntax(GenericSyntax):
old = expression[firstIndex:lastIndex]
oldUpper = old.upper()
oldUpper = oldUpper.replace("CHAR(", "").replace(")", "")
oldUpper = oldUpper.split("+")
escaped = "'%s'" % "".join([chr(int(char)) for char in oldUpper])
escaped = "'%s'" % chr(int(oldUpper))
expression = expression.replace(old, escaped)
expression = expression.replace("'+'", "")
return expression