disabling "negative logic" as it's not half done (it was "luckily" working for --string/--regex/--code but it was a sheer luck); removing "dirty fix" from checks.py; proof that this was not ready for the release is that there was not check for negative logic anywhere for anything more then --string/--regex/--code

This commit is contained in:
Miroslav Stampar
2012-03-29 13:39:12 +00:00
parent 772ead8d03
commit ce4c697bbd
2 changed files with 11 additions and 12 deletions

View File

@@ -329,11 +329,6 @@ def checkSqlInjection(place, parameter, value):
kb.matchRatio = None
Request.queryPage(genCmpPayload(), place, raise404=False)
# If in the comparing stage there was an error
# then anything non-error will be considered as True
if kb.errorIsNone and kb.matchRatio is None:
kb.matchRatio = LOWER_RATIO_BOUND
# Perform the test's True request
trueResult = Request.queryPage(reqPayload, place, raise404=False)