removed --useBetween switch and added new tampering module ./tamper/between.py

tamper/between.py

@@ -0,0 +1,53 @@
+#!/usr/bin/env python
+
+"""
+$Id$
+
+Copyright (c) 2006-2010 sqlmap developers (http://sqlmap.sourceforge.net/)
+See the file 'doc/COPYING' for copying permission
+"""
+
+import re
+
+from lib.core.convert import urldecode
+from lib.core.convert import urlencode
+
+"""
+'>' -> NOT BETWEEN 0 AND (e.g., A>B->A NOT BETWEEN 0 AND B)
+"""
+def tamper(place, value):
+    retVal = value
+
+    if value:
+        if place != "URI":
+            value = urldecode(value)
+
+        retVal = ""
+        qoute, doublequote, firstspace = False, False, False
+
+        for i in xrange(len(value)):
+            if not firstspace:
+                if value[i].isspace():
+                    firstspace = True
+                    retVal += "/**/"
+                    continue
+
+            elif value[i] == '\'':
+                qoute = not qoute
+
+            elif value[i] == '"':
+                doublequote = not doublequote
+
+            elif value[i]==">" and not doublequote and not qoute:
+                retVal += " " if i > 0 and not value[i-1].isspace() else ""
+                retVal += "NOT BETWEEN 0 AND"
+                retVal += " " if i < len(value) - 1 and not value[i+1].isspace() else ""
+                continue
+
+            retVal += value[i]
+
+        if place != "URI":
+            retVal = urlencode(retVal)
+
+    return retVal
+