@@ -236,102 +236,3 @@ txn#!#commit
236236select * from txntable2;
237237
238238DROP TABLE txntable2;
239-
240- # SQL scan Tests
241- CREATE TABLE scan_test (id INT, data TEXT);
242-
243- # Test 1: Command scan via transaction name
244- txn#!#begin#!#test'; DROP TABLE scan_test; --
245- INSERT INTO scan_test VALUES(1, 'test');
246- txn#!#commit
247- SELECT * FROM scan_test;
248-
249- # Test 2: Semicolon separation attack
250- txn#!#begin#!#test; DELETE FROM scan_test; BEGIN TRANSACTION real
251- INSERT INTO scan_test VALUES(2, 'data');
252- txn#!#commit
253- SELECT * FROM scan_test;
254-
255- # Test 3: Savepoint scan
256- txn#!#begin#!#tx1
257- txn#!#savepoint#!#sp1'; DROP TABLE scan_test; --
258- INSERT INTO scan_test VALUES(3, 'save');
259- txn#!#rollback#!#sp1
260- txn#!#commit
261- SELECT * FROM scan_test;
262-
263- # Test 4: Commit scan
264- txn#!#begin#!#tx1
265- INSERT INTO scan_test VALUES(4, 'commit');
266- txn#!#commit#!#txn'; UPDATE scan_test SET data='hacked'; --
267- SELECT * FROM scan_test;
268-
269- # Test 5: Rollback scan
270- txn#!#begin#!#tx1
271- INSERT INTO scan_test VALUES(5, 'rollback');
272- txn#!#rollback#!#rb'; DELETE FROM scan_test; --
273- SELECT * FROM scan_test;
274-
275- # Test 6: Unicode bypass attempt
276- txn#!#begin#!#test\u0027; SELECT version(); --
277- INSERT INTO scan_test VALUES(6, 'unicode');
278- txn#!#commit
279- SELECT * FROM scan_test;
280-
281- # Test 7: Bracket escape attempt
282- txn#!#begin#!#test]] UNION SELECT 999, 'injected' --
283- INSERT INTO scan_test VALUES(7, 'bracket');
284- txn#!#commit
285- SELECT * FROM scan_test;
286-
287- # Test 8: Multiple statement scan
288- txn#!#begin#!#t1]; SELECT @@version; --
289- INSERT INTO scan_test VALUES(8, 'multi');
290- txn#!#commit
291- SELECT * FROM scan_test;
292-
293- # Test 9: Function execution attempt
294- txn#!#begin#!#tx'; SELECT current_user(); --
295- INSERT INTO scan_test VALUES(9, 'function');
296- txn#!#commit
297- SELECT * FROM scan_test;
298-
299- # Test 10: Information schema access
300- txn#!#begin#!#tx'; SELECT table_name FROM information_schema.tables; --
301- INSERT INTO scan_test VALUES(10, 'schema');
302- txn#!#commit
303- SELECT * FROM scan_test;
304-
305- # Test 11: Nested quote escape
306- txn#!#begin#!#test']; INSERT INTO scan_test VALUES(999, 'injected'); --
307- INSERT INTO scan_test VALUES(11, 'nested');
308- txn#!#commit
309- SELECT * FROM scan_test;
310-
311- # Test 12: Hash character bypass
312- txn#!#begin#!##temp'; DROP TABLE scan_test; --
313- INSERT INTO scan_test VALUES(12, 'hash');
314- txn#!#commit
315- SELECT * FROM scan_test;
316-
317- # Test 13: Dollar sign bypass
318- txn#!#begin#!#$var'; DELETE FROM scan_test; --
319- INSERT INTO scan_test VALUES(13, 'dollar');
320- txn#!#commit
321- SELECT * FROM scan_test;
322-
323- # Test 14: Extended ASCII bypass
324- txn#!#begin#!#test\x80\xff'; SELECT 'injected'; --
325- INSERT INTO scan_test VALUES(14, 'ascii');
326- txn#!#commit
327- SELECT * FROM scan_test;
328-
329- # Test 15: Savepoint with system command attempt
330- txn#!#begin#!#tx1
331- txn#!#savepoint#!#sp'; EXEC xp_cmdshell 'dir'; --
332- INSERT INTO scan_test VALUES(15, 'system');
333- txn#!#rollback#!#sp
334- txn#!#commit
335- SELECT * FROM scan_test;
336-
337- DROP TABLE scan_test;
0 commit comments