PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 12:41:30 +00:00
Code Issues Projects Releases Wiki Activity

Refactoring DBMS string escaping functions

Browse Source
This commit is contained in:
Miroslav Stampar
2013-01-20 13:45:58 +01:00
parent 3b57fe2924
commit b4a55a809e
12 changed files with 52 additions and 206 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
plugins/dbms/sqlite/syntax.py
View File

@@ -6,10 +6,8 @@ See the file 'doc/COPYING' for copying permission
"""
import binascii
import re
from lib.core.common import isDBMSVersionAtLeast
from lib.core.exception import SqlmapSyntaxException
from plugins.generic.syntax import Syntax as GenericSyntax
class Syntax(GenericSyntax):
@@ -18,13 +16,10 @@ class Syntax(GenericSyntax):
@staticmethod
def escape(expression, quote=True):
unescaped = expression
def escaper(value):
retVal = value
if isDBMSVersionAtLeast('3'):
retVal = "X'%s'" % binascii.hexlify(value)
return retVal
if isDBMSVersionAtLeast('3'):
if quote:
for item in re.findall(r"'[^']+'", expression, re.S):
unescaped = unescaped.replace(item, "X'%s'" % binascii.hexlify(item.strip("'")))
else:
unescaped = "X'%s'" % binascii.hexlify(expression)
return unescaped
return Syntax._escape(expression, quote, escaper)