sqlmap/tamper/quote2dollars.py
2019-10-07 15:04:55 +03:00

26 lines
510 B
Python

#!/usr/bin/env python
"""
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
See the file 'LICENSE' for copying permission
"""
from lib.core.enums import PRIORITY
__priority__ = PRIORITY.NORMAL
def dependencies():
pass
def tamper(payload, **kwargs):
"""
Tested on PostgreSQL 12.0
Replace single and double quotes with dollar signs (e.g. ' -> $$)
>>> tamper("1' or '1'='1")
"1$$ or $$1$$=$$1"
"""
return payload.replace("'", "$$'").replace('"', '$$')