sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-27 16:39:54 +03:00
Code Issues Packages Projects Releases Wiki Activity

Update quote2dollars.py

Browse Source
This commit is contained in:
Mehmet Leblebici 2019-10-07 15:10:48 +03:00 committed by GitHub
parent 13af806e1d
commit fccf2274eb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
tamper/quote2dollars.py
View File

@ -14,12 +14,15 @@ def dependencies():
def tamper(payload, **kwargs):
"""
Tested on PostgreSQL 12.0
Replaces single quote with dollar signs (e.g. ' -> $$)
Replace single and double quotes with dollar signs (e.g. ' -> $$)
Tested against:
* PostgreSQL 12.0
Notes: useful for applications that use PostgreSQL database and encodes or sanitizes quote characters
>>> tamper("1' or '1'='1")
"1$$ or $$1$$=$$1"
"""
return payload.replace("'", "$$'").replace('"', '$$')
return payload.replace("'", "$$")