minor update

stamparm · stamparm · commit 85a4ef65939d · 2012-02-08T12:00:03.000Z
diff --git a/lib/request/connect.py b/lib/request/connect.py
@@ -731,6 +731,8 @@ def _randomizeParameter(paramString, randomParameter):
         if not response and removeReflection:
             page = removeReflectiveValues(page, payload)
 
+        kb.permissionFlag = re.search(r"permission denied", page or "", re.I) is not None
+
         if content or response:
             return page, headers
 
diff --git a/plugins/generic/enumeration.py b/plugins/generic/enumeration.py
@@ -1768,20 +1768,20 @@ def dumpTable(self, foundData=None):
 
                         entriesCount = len(columnEntries)
 
-                if len(kb.data.dumpedTable) > 0:
+                if len(kb.data.dumpedTable) == 0 or (entriesCount == 0 and kb.permissionFlag):
+                    warnMsg = "unable to retrieve the entries of "
+                    if conf.col:
+                        warnMsg += "columns '%s' " % colString
+                    warnMsg += "for table '%s' " % unsafeSQLIdentificatorNaming(tbl)
+                    warnMsg += "on database '%s'%s" % (unsafeSQLIdentificatorNaming(conf.db), " (permission denied)" if kb.permissionFlag else "")
+                    logger.warn(warnMsg)
+                else:
                     kb.data.dumpedTable["__infos__"] = { "count": entriesCount,
                                                          "table": safeSQLIdentificatorNaming(tbl, True),
                                                          "db":    safeSQLIdentificatorNaming(conf.db) }
 
                     attackDumpedTable()
                     conf.dumper.dbTableValues(kb.data.dumpedTable)
-                else:
-                    warnMsg = "unable to retrieve the entries of "
-                    if conf.col:
-                        warnMsg += "columns '%s' " % colString
-                    warnMsg += "for table '%s' " % unsafeSQLIdentificatorNaming(tbl)
-                    warnMsg += "on database '%s'" % unsafeSQLIdentificatorNaming(conf.db)
-                    logger.warn(warnMsg)
 
             except sqlmapConnectionException, e:
                 errMsg = "connection exception detected in dumping phase: "
