Minor bug fix for Microsoft Access case expressions (like --common-tables) in UNION query SQL injection

This commit is contained in:
Bernardo Damele
2011-07-08 10:19:01 +00:00
parent 02bfd05b20
commit b5dd4d4a63
3 changed files with 6 additions and 6 deletions

View File

@@ -356,7 +356,7 @@
<comment query="%00"/>
<timedelay/>
<substring query="MID((%s),%d,%d)"/>
<case query="IIF(%s,1,0)"/>
<case query="SELECT (IIF(%s,1,0))"/>
<banner/>
<!--CURRENTUSER() is not available outside the MS Access query tool itself-->
<current_user/>