PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 12:41:30 +00:00
Code Issues Projects Releases Wiki Activity

minor usability enhancement regarding warning for --text-only switch

Browse Source
This commit is contained in:
Miroslav Stampar
2011-05-26 20:48:18 +00:00
parent ff030e4d24
commit 4f46a5ab63
4 changed files with 24 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/controller/checks.py
View File

@@ -502,7 +502,7 @@ def checkSqlInjection(place, parameter, value):
def checkFalsePositives(injection):
"""
Checks for false positives
Checks for false positives (only in single special cases)
"""
retVal = injection
@@ -521,7 +521,8 @@ def checkFalsePositives(injection):
while randInt1 == randInt2:
randInt2 = int(randomInt(2)) + 1
# simple arithmetic operations like in Turing tests
# simple arithmetic operations which should show basic
# arithmetic ability of the backend if it's really injectable
if not checkBooleanExpression("(%d+%d)=%d" % (randInt1, randInt2, randInt1 + randInt2)):
retVal = None
elif checkBooleanExpression("%d=%d" % (randInt1, randInt2)):