#!/usr/bin/env python """ Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/) See the file 'LICENSE' for copying permission """ from lib.core.enums import PRIORITY __priority__ = PRIORITY.NORMAL def dependencies(): pass def tamper(payload, **kwargs): """ Tested on PostgreSQL 12.0 Replace single and double quotes with dollar signs (e.g. ' -> $$) >>> tamper("1' or '1'='1") "1$$ or $$1$$=$$1" """ return payload.replace("'", "$$'").replace('"', '$$')