added BULK to EXCLUDE_UNESCAPE and preventing crashes when output=[]

This commit is contained in:
Miroslav Stampar
2011-02-07 10:22:43 +00:00
parent 008d434325
commit 096efea282
2 changed files with 3 additions and 3 deletions

View File

@@ -251,4 +251,4 @@ URI_INJECTION_MARK_CHAR = '*'
MYSQL_ERROR_TRIM_LENGTH = 100
# Do not unescape the injected statement if it contains any of the following SQL words
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ")
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ", "BULK ")