This commit is contained in:
Miroslav Stampar
2025-12-31 00:13:42 +01:00
parent d7be168f79
commit 33cd5d5055
6 changed files with 9 additions and 4 deletions

View File

@@ -1095,6 +1095,8 @@ def heuristicCheckSqlInjection(place, parameter):
errMsg += "int.TryParse(Request.QueryString[\"%s\"], out %s)" % (parameter, parameter)
elif platform == WEB_PLATFORM.JSP:
errMsg += "%s=Integer.parseInt(request.getParameter(\"%s\"))" % (parameter, parameter)
elif platform == WEB_PLATFORM.CFM:
errMsg += "%s=Val(url.%s)" % (parameter, parameter)
else:
errMsg += "$%s=intval($_REQUEST[\"%s\"])" % (parameter, parameter)