102102from lib .core .settings import DEFAULT_COOKIE_DELIMITER
103103from lib .core .settings import DEFAULT_GET_POST_DELIMITER
104104from lib .core .settings import DEFAULT_MSSQL_SCHEMA
105+ from lib .core .settings import DEV_EMAIL_ADDRESS
105106from lib .core .settings import DUMMY_USER_INJECTION
106107from lib .core .settings import DYNAMICITY_MARK_LENGTH
107108from lib .core .settings import ERROR_PARSING_REGEXES
@@ -1768,7 +1769,7 @@ def safeStringFormat(format_, params):
17681769 if isinstance (params , basestring ):
17691770 retVal = retVal .replace ("%s" , params , 1 )
17701771 elif not isListLike (params ):
1771- retVal = retVal .replace ("%s" , str (params ), 1 )
1772+ retVal = retVal .replace ("%s" , getUnicode (params ), 1 )
17721773 else :
17731774 start , end = 0 , len (retVal )
17741775 match = re .search (r"%s(.+)%s" % (PAYLOAD_DELIMITER , PAYLOAD_DELIMITER ), retVal )
@@ -1794,7 +1795,7 @@ def safeStringFormat(format_, params):
17941795 if match :
17951796 if count >= len (params ):
17961797 warnMsg = "wrong number of parameters during string formatting. "
1797- warnMsg += "Please report by e-mail content \" %r | %r | %r\" to '[email protected] '" % (
format_ ,
params ,
retVal )
1798+ warnMsg += "Please report by e-mail content \" %r | %r | %r\" to '%s '" % (format_ , params , retVal , DEV_EMAIL_ADDRESS )
17981799 raise SqlmapValueException (warnMsg )
17991800 else :
18001801 retVal = re .sub (r"(\A|[^A-Za-z0-9])(%s)([^A-Za-z0-9]|\Z)" , r"\g<1>%s\g<3>" % params [count ], retVal , 1 )
0 commit comments