minor update/patch

stamparm · stamparm · commit 6f5ef23f2827 · 2012-01-01T22:55:32.000Z
diff --git a/plugins/dbms/mysql/syntax.py b/plugins/dbms/mysql/syntax.py
@@ -10,6 +10,7 @@
 import binascii
 import re
 
+from lib.core.convert import utf8encode
 from lib.core.exception import sqlmapSyntaxException
 from plugins.generic.syntax import Syntax as GenericSyntax
 
@@ -25,7 +26,7 @@ def unescape(expression, quote=True):
                 try:
                     unescaped = unescaped.replace(item, "0x%s" % binascii.hexlify(item.strip("'")))
                 except UnicodeEncodeError:
-                    unescaped = unescaped.replace(item, "CHAR(0x%s USING utf8)" % "".join(("%.2x" % ord(_)) if ord(_) < 256 else ("%.4x" % ord(_)) for _ in item.strip("'")))
+                    unescaped = unescaped.replace(item, "CONVERT(0x%s USING utf8)" % "".join("%.2x" % ord(_) for _ in utf8encode(item.strip("'"))))
         else:
             unescaped = "0x%s" % binascii.hexlify(expression)
 
