Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit a40d7a5

Browse files
committed
Minor improvement (safer to use column name in COUNT than *, especially when only one column is needed)
1 parent d37be5f commit a40d7a5

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

lib/techniques/error/use.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -306,7 +306,7 @@ def errorUse(expression, dump=False):
306306
stopLimit = conf.limitStop
307307

308308
# Count the number of SQL query entries output
309-
countedExpression = expression.replace(expressionFields, queries[Backend.getIdentifiedDbms()].count.query % '*', 1)
309+
countedExpression = expression.replace(expressionFields, queries[Backend.getIdentifiedDbms()].count.query % ('*' if len(expressionFieldsList) > 1 else expressionFields), 1)
310310

311311
if " ORDER BY " in expression:
312312
countedExpression = countedExpression[:countedExpression.index(" ORDER BY ")]

lib/techniques/union/use.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -233,7 +233,7 @@ def unionUse(expression, unpack=True, dump=False):
233233
stopLimit = conf.limitStop
234234

235235
# Count the number of SQL query entries output
236-
countedExpression = expression.replace(expressionFields, queries[Backend.getIdentifiedDbms()].count.query % '*', 1)
236+
countedExpression = expression.replace(expressionFields, queries[Backend.getIdentifiedDbms()].count.query % ('*' if len(expressionFieldsList) > 1 else expressionFields), 1)
237237

238238
if " ORDER BY " in countedExpression.upper():
239239
_ = countedExpression.upper().rindex(" ORDER BY ")

0 commit comments

Comments
 (0)