added BULK to EXCLUDE_UNESCAPE and preventing crashes when output=[]

This commit is contained in:
Miroslav Stampar committed 2011-02-07 10:22:43 +00:00
1 parent 008d434325
commit 096efea282
2 files changed
+3 -3

No files matched your search

+1 -1
View File
@@ -251,4 +251,4 @@ URI_INJECTION_MARK_CHAR = '*'
MYSQL_ERROR_TRIM_LENGTH = 100
# Do not unescape the injected statement if it contains any of the following SQL words
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ")
EXCLUDE_UNESCAPE = ("WAITFOR DELAY ", " INTO DUMPFILE ", " INTO OUTFILE ", "CREATE ", "BULK ")