PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 21:21:33 +00:00
Code Issues Projects Releases Wiki Activity

updated doc and minor layout adjustments

Browse Source
This commit is contained in:
Bernardo Damele
2011-04-21 21:53:35 +00:00
parent 06a00fe85e
commit 6d07dddf60
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
doc/THANKS
View File

@@ -30,6 +30,9 @@ Daniele Bellucci <daniele.bellucci@gmail.com>
for starting sqlmap project and developing it between July and August for starting sqlmap project and developing it between July and August
2006 2006
Anthony Boynes <aboynes@gmail.com>
for reporting a bug
Velky Brat <velkybrat@gmail.com> Velky Brat <velkybrat@gmail.com>
for suggesting a minor enhancement to the bisection algorithm for suggesting a minor enhancement to the bisection algorithm

7
lib/controller/controller.py
View File

@@ -322,6 +322,7 @@ def start():
if (len(kb.injections) == 0 or (len(kb.injections) == 1 and kb.injections[0].place is None)) \ if (len(kb.injections) == 0 or (len(kb.injections) == 1 and kb.injections[0].place is None)) \
and (kb.injection.place is None or kb.injection.parameter is None): and (kb.injection.place is None or kb.injection.parameter is None):
if not conf.string and not conf.regexp: if not conf.string and not conf.regexp:
# NOTE: this is not needed anymore, leaving only to display # NOTE: this is not needed anymore, leaving only to display
# a warning message to the user in case the page is not stable # a warning message to the user in case the page is not stable
@@ -359,6 +360,7 @@ def start():
continue continue
paramDict = conf.paramDict[place] paramDict = conf.paramDict[place]
for parameter, value in paramDict.items(): for parameter, value in paramDict.items():
if not proceed: if not proceed:
break break
@@ -396,8 +398,9 @@ def start():
if testSqlInj: if testSqlInj:
check = heuristicCheckSqlInjection(place, parameter) check = heuristicCheckSqlInjection(place, parameter)
if not check and conf.realTest and\
not simpletonCheckSqlInjection(place, parameter, value): if not check and conf.realTest and \
not simpletonCheckSqlInjection(place, parameter, value):
continue continue
logMsg = "testing sql injection on %s " % place logMsg = "testing sql injection on %s " % place