File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 368368369369 for reporting a minor bug
370370
371+ 372+ for contributing a patch for INSERT/UPDATE generic boundaries
373+
371374Travis Phillips <
[email protected] >
372375 for suggesting a minor enhancement
373376
Original file line number Diff line number Diff line change @@ -485,7 +485,63 @@ Formats:
485485 <prefix >" WHERE [RANDNUM]=[RANDNUM]</prefix >
486486 <suffix ></suffix >
487487 </boundary >
488- <!-- End of generic boundaries -->
488+ <!-- End of pre-WHERE generic boundaries -->
489+
490+ <!-- INSERT/UPDATE generic boundaries (e.g. "INSERT INTO table VALUES ('$_REQUEST["name"]',...)"-->
491+ <boundary >
492+ <level >5</level >
493+ <clause >1</clause >
494+ <where >1</where >
495+ <ptype >2</ptype >
496+ <prefix >' || (SELECT [RANDNUM1] FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix >
497+ <suffix >) || '</suffix >
498+ </boundary >
499+
500+ <boundary >
501+ <level >5</level >
502+ <clause >1</clause >
503+ <where >1</where >
504+ <ptype >2</ptype >
505+ <prefix >' || (SELECT [RANDNUM1] WHERE [RANDNUM]=[RANDNUM]</prefix >
506+ <suffix >) || '</suffix >
507+ </boundary >
508+
509+ <boundary >
510+ <level >5</level >
511+ <clause >1</clause >
512+ <where >1</where >
513+ <ptype >1</ptype >
514+ <prefix > + (SELECT [RANDNUM1] FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix >
515+ <suffix >)</suffix >
516+ </boundary >
517+
518+ <boundary >
519+ <level >5</level >
520+ <clause >1</clause >
521+ <where >1</where >
522+ <ptype >1</ptype >
523+ <prefix > + (SELECT [RANDNUM1] WHERE [RANDNUM]=[RANDNUM]</prefix >
524+ <suffix >)</suffix >
525+ </boundary >
526+
527+ <boundary >
528+ <level >5</level >
529+ <clause >1</clause >
530+ <where >1</where >
531+ <ptype >2</ptype >
532+ <prefix >' + (SELECT '[RANDSTR]' FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix >
533+ <suffix >) + '</suffix >
534+ </boundary >
535+
536+ <boundary >
537+ <level >5</level >
538+ <clause >1</clause >
539+ <where >1</where >
540+ <ptype >2</ptype >
541+ <prefix >' + (SELECT '[RANDSTR]' WHERE [RANDNUM]=[RANDNUM]</prefix >
542+ <suffix >) + '</suffix >
543+ </boundary >
544+ <!-- End of INSERT/UPDATE generic boundaries -->
489545
490546
491547 <!-- Boolean-based blind tests - WHERE/HAVING clause -->
You can’t perform that action at this time.
0 commit comments