mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-08 13:41:29 +00:00
No point in unescaping the expression also in suffixQuery() also 'cause it will exit sqlmap if the parameter value is a string hence injection payload starts with single quote (')
This commit is contained in:
@@ -181,7 +181,6 @@ class Agent:
|
|||||||
return self.payloadDirect(expression)
|
return self.payloadDirect(expression)
|
||||||
|
|
||||||
expression = self.cleanupPayload(expression)
|
expression = self.cleanupPayload(expression)
|
||||||
expression = unescaper.unescape(expression)
|
|
||||||
|
|
||||||
if comment is not None:
|
if comment is not None:
|
||||||
expression += comment
|
expression += comment
|
||||||
|
|||||||
Reference in New Issue
Block a user