first commit with mysql/error/substringing

This commit is contained in:
Miroslav Stampar
2011-02-08 16:23:33 +00:00
parent c3eb82e60b
commit 37f7001143
2 changed files with 42 additions and 25 deletions

View File

@@ -248,7 +248,7 @@ MAX_RATIO = 1.0
URI_INJECTION_MARK_CHAR = '*'
# Maximum length used for retrieving data over MySQL error based payload due to "known" problems with longer result strings
MYSQL_ERROR_TRIM_LENGTH = 100
MYSQL_ERROR_CHUNK_LENGTH = 50
# Do not unescape the injected statement if it contains any of the following SQL words
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ", "BULK ", "EXEC ", "RECONFIGURE ", "DECLARE ")