search

client9 / libinjection

SQL / SQLI tokenizer parser analyzer
Other
1k stars 274 forks source link

test / fix 'ad-hoc' character encodings for mysql #45

Closed client9 closed 11 years ago

client9 commented 11 years ago

mysql special

_CHARSETNAME'string'

single or double quote _latin1'foo bar' _latin"foo bar"

these are not valid _latinthis doesn't work _latin1'no'

probably just need to stop parsing and say "sqli" if found

client9 commented 11 years ago

fixed, tested.