Minor enhancement to prefix payload in ORDER BY and GROUP BY clauses

This commit is contained in:
Bernardo Damele
2010-12-03 14:39:51 +00:00
parent bb40ab9fb0
commit b824826a89
2 changed files with 6 additions and 4 deletions

View File

@@ -257,7 +257,7 @@ def checkSqlInjection(place, parameter, value):
if where == 1:
origValue = value
elif where == 2:
origValue = "-%s" % value
origValue = "-%s" % randomInt()
elif where == 3:
origValue = ""