Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit a1fe9d0

Browse files
committed
minor revert
1 parent 34d9a91 commit a1fe9d0

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

plugins/generic/enumeration.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -464,7 +464,7 @@ def getPrivileges(self, query2=False):
464464
query += " WHERE "
465465

466466
if Backend.isDbms(DBMS.MYSQL) and kb.data.has_information_schema:
467-
query += " OR ".join("%s LIKE '%s'" % (condition, user) for user in sorted(users))
467+
query += " OR ".join("%s LIKE '%%%s%%'" % (condition, user) for user in sorted(users))
468468
else:
469469
query += " OR ".join("%s = '%s'" % (condition, user) for user in sorted(users))
470470

@@ -1162,7 +1162,7 @@ def getColumns(self, onlyColNames=False, colTuple=None):
11621162
infoMsg = "fetching columns "
11631163

11641164
if len(colList) > 0:
1165-
condQuery = " AND (%s)" % " OR ".join("%s LIKE '%s'" % (condition, unsafeSQLIdentificatorNaming(col)) for col in sorted(colList))
1165+
condQuery = " AND (%s)" % " OR ".join("%s LIKE '%%%s%%'" % (condition, unsafeSQLIdentificatorNaming(col)) for col in sorted(colList))
11661166
likeMsg = "like '%s' " % ", ".join(unsafeSQLIdentificatorNaming(col) for col in sorted(colList))
11671167
infoMsg += likeMsg
11681168
else:

0 commit comments

Comments
 (0)