--technique can now be something like 123 which includes both techniques 1, 2 and 3

This commit is contained in:
Miroslav Stampar
2011-02-17 21:39:16 +00:00
parent 7ebc1ab90a
commit 22cd49a217
4 changed files with 13 additions and 11 deletions

View File

@@ -93,10 +93,10 @@ def checkSqlInjection(place, parameter, value):
# Skip test if the user's wants to test only for a specific
# technique
if conf.technique and isinstance(conf.technique, int) and stype != conf.technique:
if isinstance(conf.technique, list) and stype not in conf.technique:
debugMsg = "skipping test '%s' because the user " % title
debugMsg += "specified to test only for "
debugMsg += "%s" % PAYLOAD.SQLINJECTION[conf.technique]
debugMsg += "%s" % ",".join(map(lambda x: PAYLOAD.SQLINJECTION[x], conf.technique))
logger.debug(debugMsg)
continue