mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 12:41:30 +00:00
Minor adjustment (URI (marked with custom injection char) has precedence over GET/POST)
This commit is contained in:
@@ -368,10 +368,10 @@ def start():
|
|||||||
# Do a little prioritization reorder of a testable parameter list
|
# Do a little prioritization reorder of a testable parameter list
|
||||||
parameters = conf.parameters.keys()
|
parameters = conf.parameters.keys()
|
||||||
|
|
||||||
# Order of testing list (last to first)
|
# Order of testing list (first to last)
|
||||||
orderList = (PLACE.URI, PLACE.GET, PLACE.POST, PLACE.CUSTOM_POST)
|
orderList = (PLACE.CUSTOM_POST, PLACE.URI, PLACE.POST, PLACE.GET)
|
||||||
|
|
||||||
for place in orderList:
|
for place in orderList[::-1]:
|
||||||
if place in parameters:
|
if place in parameters:
|
||||||
parameters.remove(place)
|
parameters.remove(place)
|
||||||
parameters.insert(0, place)
|
parameters.insert(0, place)
|
||||||
|
|||||||
Reference in New Issue
Block a user