libinjection icon indicating copy to clipboard operation
libinjection copied to clipboard

MySQL statement can not be identified

Open perfgao opened this issue 7 years ago • 0 comments

Hi,

I found the existence of such MYSQL statement can not be identified successfully.

the test case:

require 'libinjection'

sqli = "DELETE t1, t2 FROM t1 INNER JOIN t2 INNER JOIN t3 WHERE t1.id=t2.id AND t2.id=t3.id;"

sql_state = libinjection.sqli_state()
libinjection.sqli_init(sql_state, sqli, sqli:len(), 0)

print(libinjection.is_sqli(sql_state))   

it‘s will print:

0

perfgao avatar Mar 10 '17 10:03 perfgao