Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Commit b12d955

Browse filesBrowse files
bdamelebdamele
committed
Updated packaging scripts, site and finalized the documentation to release version 0.6.4
1 parent 770e000 commit b12d955
Copy full SHA for b12d955

File tree

Expand file treeCollapse file tree

5 files changed

+37
-14
lines changed
Open diff view settings
Filter options
Expand file treeCollapse file tree

5 files changed

+37
-14
lines changed
Open diff view settings
Collapse file

‎doc/ChangeLog‎

Copy file name to clipboardExpand all lines: doc/ChangeLog
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ sqlmap (0.6.4-1) stable; urgency=low
2727
provided;
2828
* Updated documentation.
2929

30-
-- Bernardo Damele A. G. <bernardo.damele@gmail.com> Day, DD MMM 2009 10:00:00 +0000
30+
-- Bernardo Damele A. G. <bernardo.damele@gmail.com> Tue, 3 Feb 2009 23:30:00 +0000
3131

3232
sqlmap (0.6.3-1) stable; urgency=low
3333

Collapse file

‎doc/README.html‎

Copy file name to clipboardExpand all lines: doc/README.html
+17-6Lines changed: 17 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
<H1>sqlmap user's manual</H1>
99

1010
<H2>by
11-
<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.4, DDth of MMM 2009
11+
<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.4, 3rd of February 2009
1212
<HR>
1313
<EM>This document is the user's manual to use
1414
<A HREF="http://sqlmap.sourceforge.net">sqlmap</A>.
@@ -407,7 +407,7 @@ <H2><A NAME="s5">5.</A> <A HREF="#toc5">Usage</A></H2>
407407

408408
sqlmap/0.6.4 coded by Bernardo Damele A. G. &lt;bernardo.damele@gmail.com>
409409
and Daniele Bellucci &lt;daniele.bellucci@gmail.com>
410-
410+
411411
Usage: sqlmap.py [options]
412412

413413
Options:
@@ -3801,28 +3801,39 @@ <H3>Run your own SQL statement</H3>
38013801
sql> SELECT COUNT(name) FROM users
38023802
[10:11:57] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
38033803
[10:11:57] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
3804-
[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
3804+
[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32))
3805+
FROM users
38053806
[10:11:59] [INFO] retrieved: 4
38063807
[10:11:59] [INFO] performed 13 queries in 0 seconds
38073808
SELECT COUNT(name) FROM users: '4'
38083809

38093810
sql> INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');
38103811
[10:12:35] [INFO] testing stacked queries support on parameter 'id'
38113812
[10:12:40] [INFO] the web application supports stacked queries on parameter 'id'
3812-
[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');'
3813+
[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname)
3814+
VALUES (5, 'from', 'sql shell');'
38133815
[10:12:40] [INFO] done
38143816
sql> SELECT COUNT(name) FROM users
38153817
[10:12:51] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
38163818
[10:12:51] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
3817-
[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
3819+
[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32))
3820+
FROM users
38183821
[10:12:53] [INFO] retrieved: 5
38193822
[10:12:54] [INFO] performed 20 queries in 0 seconds
38203823
SELECT COUNT(name) FROM users: '5'
38213824
</PRE>
38223825
</CODE></BLOCKQUOTE>
38233826
</P>
38243827

3825-
<P>TODO</P>
3828+
<P>As you can see from this last example, when the user provides a SQL
3829+
statement other than <CODE>SELECT</CODE>, sqlmap recognizes it, tests if the
3830+
web application supports stacked queries and in case it does, it executes
3831+
the provided SQL statement in a multiple statement.</P>
3832+
3833+
<P>Beware that some web application technologies do not support stacked
3834+
queries on specific database management systems. For instance, PHP does not
3835+
support stacked queries when the back-end DBMS is MySQL, but it does
3836+
support when the back-end DBMS is PostgreSQL.</P>
38263837

38273838

38283839
<H2><A NAME="ss5.8">5.8</A> <A HREF="#toc5.8">File system access</A>
Collapse file

‎doc/README.pdf‎

Copy file name to clipboard
713 Bytes
Binary file not shown.
Collapse file

‎doc/README.sgml‎

Copy file name to clipboardExpand all lines: doc/README.sgml
+18-6Lines changed: 18 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44

55
<title>sqlmap user's manual
66
<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">
7-
<date>version 0.6.4, DDth of MMM 2009
7+
<date>version 0.6.4, 3rd of February 2009
88
<abstract>
99
This document is the user's manual to use <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">.
1010
Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage">
@@ -362,7 +362,7 @@ $ python sqlmap.py -h
362362

363363
sqlmap/0.6.4 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
364364
and Daniele Bellucci <daniele.bellucci@gmail.com>
365-
365+
366366
Usage: sqlmap.py [options]
367367

368368
Options:
@@ -3698,27 +3698,39 @@ back-end DBMS: PostgreSQL
36983698
sql> SELECT COUNT(name) FROM users
36993699
[10:11:57] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
37003700
[10:11:57] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
3701-
[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
3701+
[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32))
3702+
FROM users
37023703
[10:11:59] [INFO] retrieved: 4
37033704
[10:11:59] [INFO] performed 13 queries in 0 seconds
37043705
SELECT COUNT(name) FROM users: '4'
37053706

37063707
sql> INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');
37073708
[10:12:35] [INFO] testing stacked queries support on parameter 'id'
37083709
[10:12:40] [INFO] the web application supports stacked queries on parameter 'id'
3709-
[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');'
3710+
[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname)
3711+
VALUES (5, 'from', 'sql shell');'
37103712
[10:12:40] [INFO] done
37113713
sql> SELECT COUNT(name) FROM users
37123714
[10:12:51] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
37133715
[10:12:51] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
3714-
[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
3716+
[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32))
3717+
FROM users
37153718
[10:12:53] [INFO] retrieved: 5
37163719
[10:12:54] [INFO] performed 20 queries in 0 seconds
37173720
SELECT COUNT(name) FROM users: '5'
37183721
</verb></tscreen>
37193722

37203723
<p>
3721-
TODO
3724+
As you can see from this last example, when the user provides a SQL
3725+
statement other than <tt>SELECT</tt>, sqlmap recognizes it, tests if the
3726+
web application supports stacked queries and in case it does, it executes
3727+
the provided SQL statement in a multiple statement.
3728+
3729+
<p>
3730+
Beware that some web application technologies do not support stacked
3731+
queries on specific database management systems. For instance, PHP does not
3732+
support stacked queries when the back-end DBMS is MySQL, but it does
3733+
support when the back-end DBMS is PostgreSQL.
37223734

37233735

37243736
<sect1>File system access
Collapse file

‎lib/core/settings.py‎

Copy file name to clipboardExpand all lines: lib/core/settings.py
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030

3131

3232
# sqlmap version and site
33-
VERSION = "0.6.4-rc6"
33+
VERSION = "0.6.4"
3434
VERSION_STRING = "sqlmap/%s" % VERSION
3535
SITE = "http://sqlmap.sourceforge.net"
3636

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.