mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 20:51:31 +00:00
Minor patch (e.g. --sql-query=SELECT 'a','b','c')
This commit is contained in:
@@ -13,7 +13,9 @@ import sys
|
||||
from lib.core.common import Backend
|
||||
from lib.core.common import dataToStdout
|
||||
from lib.core.common import getSQLSnippet
|
||||
from lib.core.common import isListLike
|
||||
from lib.core.common import isStackingAvailable
|
||||
from lib.core.common import joinValue
|
||||
from lib.core.convert import getUnicode
|
||||
from lib.core.data import conf
|
||||
from lib.core.data import logger
|
||||
@@ -41,6 +43,7 @@ class Custom(object):
|
||||
sqlType = None
|
||||
query = query.rstrip(';')
|
||||
|
||||
|
||||
try:
|
||||
for sqlTitle, sqlStatements in SQL_STATEMENTS.items():
|
||||
for sqlStatement in sqlStatements:
|
||||
@@ -61,6 +64,11 @@ class Custom(object):
|
||||
|
||||
output = inject.getValue(query, fromUser=True)
|
||||
|
||||
if "SELECT" in sqlType and isListLike(output):
|
||||
for i in xrange(len(output)):
|
||||
if isListLike(output[i]):
|
||||
output[i] = joinValue(output[i])
|
||||
|
||||
return output
|
||||
elif not isStackingAvailable() and not conf.direct:
|
||||
warnMsg = "execution of non-query SQL statements is only "
|
||||
|
||||
Reference in New Issue
Block a user