Fold in comma separated values into one token

client9 / libinjection

SQL / SQLI tokenizer parser analyzer

Other

1k stars 274 forks source link

Closed client9 closed 11 years ago

client9 commented 11 years ago

One attack against libinjection is cases where you can pad out the start using comma separated values.

1,2,3,4,5,6 UNION ALL ...

comma separated values should be folded into one value

1 UNION ALL ...

client9 commented 11 years ago

fixed in 3.0.0-pre5 to 3.0.0-pre6