PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 20:51:31 +00:00
Code Issues Projects Releases Wiki Activity

minor fix (database and/or table names with - sign inside needs to be escaped by ` character or will lead to a "SQL syntax")

Browse Source
This commit is contained in:
Miroslav Stampar
2011-01-02 11:01:20 +00:00
parent dce9a762f1
commit 7b9d978cf9
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/generic/enumeration.py
View File

@@ -1131,6 +1131,12 @@ class Enumeration:
rootQuery = queries[kb.dbms].dump_table rootQuery = queries[kb.dbms].dump_table
if kb.dbms == DBMS.MYSQL:
if '-' in conf.tbl:
conf.tbl = "`%s`" % conf.tbl
if '-' in conf.db:
conf.db = "`%s`" % conf.db
if conf.col: if conf.col:
colList = conf.col.split(",") colList = conf.col.split(",")
kb.data.cachedColumns[conf.db] = {} kb.data.cachedColumns[conf.db] = {}