making --no-cast unhidden and renaming --negative-logic to --logical-negate to prevent confusion with stuff used in OR boolean based injection

This commit is contained in:
Miroslav Stampar
2012-03-30 10:50:01 +00:00
parent 79c3d6f2aa
commit 56638f9e95
5 changed files with 16 additions and 11 deletions

View File

@@ -285,7 +285,7 @@ def checkSqlInjection(place, parameter, value):
# Use different page template than the original
# one as we are changing parameters value, which
# will likely result in a different content
if not conf.logicNegative:
if not conf.logicalNegate:
origValue = "-%s" % randomInt()
else:
origValue = "%s AND %s=%s" % (origValue, randomInt(), randomInt())