mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 12:41:30 +00:00
important update regarding (Bug #209) - probably more will be needed
This commit is contained in:
@@ -10,11 +10,9 @@ See the file 'doc/COPYING' for copying permission
|
||||
import re
|
||||
|
||||
from lib.core.common import randomRange
|
||||
from lib.core.convert import urldecode
|
||||
from lib.core.convert import urlencode
|
||||
from lib.core.data import kb
|
||||
|
||||
def tamper(place, value):
|
||||
def tamper(value):
|
||||
"""
|
||||
Add random comments to value
|
||||
Example: 'INSERT' becomes 'IN/**/S/**/ERT'
|
||||
@@ -23,9 +21,6 @@ def tamper(place, value):
|
||||
retVal = value
|
||||
|
||||
if value:
|
||||
if place != "URI":
|
||||
retVal = urldecode(retVal)
|
||||
|
||||
for match in re.finditer(r"[A-Za-z_]+", retVal):
|
||||
word = match.group()
|
||||
|
||||
@@ -41,7 +36,4 @@ def tamper(place, value):
|
||||
newWord += word[-1]
|
||||
retVal = retVal.replace(word, newWord)
|
||||
|
||||
if place != "URI":
|
||||
retVal = urlencode(retVal)
|
||||
|
||||
return retVal
|
||||
|
||||
Reference in New Issue
Block a user