client9 / client9/libinjection
MySQL statement can not be identified
Open
- Dominant language
- C
- Stars
- 1k
- Forks
- 282
- PR merge metrics
- No merged PRs in 30d
Description
Hi,
I found the existence of such MYSQL statement can not be identified successfully.
the test case:
```
require 'libinjection'
sqli = "DELETE t1, t2 FROM t1 INNER JOIN t2 INNER JOIN t3 WHERE t1.id=t2.id AND t2.id=t3.id;"
sql_state = libinjection.sqli_state()
libinjection.sqli_init(sql_state, sqli, sqli:len(), 0)
print(libinjection.is_sqli(sql_state))
```
it‘s will print:
```
0
```
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.