mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-10 09:49:06 +00:00
Another update for an Issue #352 and couple of fixes
This commit is contained in:
@@ -16,10 +16,6 @@ def tamper(payload, **kwargs):
|
||||
"""
|
||||
Replaces space character (' ') with comments '/**/'
|
||||
|
||||
Example:
|
||||
* Input: SELECT id FROM users
|
||||
* Output: SELECT/**/id/**/FROM/**/users
|
||||
|
||||
Tested against:
|
||||
* Microsoft SQL Server 2005
|
||||
* MySQL 4, 5.0 and 5.5
|
||||
@@ -28,6 +24,9 @@ def tamper(payload, **kwargs):
|
||||
|
||||
Notes:
|
||||
* Useful to bypass weak and bespoke web application firewalls
|
||||
|
||||
>>> tamper('SELECT id FROM users')
|
||||
'SELECT/**/id/**/FROM/**/users'
|
||||
"""
|
||||
|
||||
retVal = payload
|
||||
|
||||
Reference in New Issue
Block a user