@@ -271,23 +271,26 @@ def checkSqlInjection(place, parameter, value):
271
271
logger .debug (debugMsg )
272
272
continue
273
273
274
- if kb .dbmsFilter and not intersect (payloadDbms , kb .dbmsFilter , True ):
274
+ elif kb .dbmsFilter and not intersect (payloadDbms , kb .dbmsFilter , True ):
275
275
debugMsg = "skipping test '%s' because " % title
276
276
debugMsg += "its declared DBMS is different than provided"
277
277
logger .debug (debugMsg )
278
278
continue
279
279
280
+ elif kb .reduceTests == False :
281
+ pass
282
+
280
283
# Skip DBMS-specific test if it does not match the
281
284
# previously identified DBMS (via DBMS-specific payload)
282
- if injection .dbms and not intersect (payloadDbms , injection .dbms , True ):
285
+ elif injection .dbms and not intersect (payloadDbms , injection .dbms , True ):
283
286
debugMsg = "skipping test '%s' because " % title
284
287
debugMsg += "its declared DBMS is different than identified"
285
288
logger .debug (debugMsg )
286
289
continue
287
290
288
291
# Skip DBMS-specific test if it does not match the
289
292
# previously identified DBMS (via DBMS-specific error message)
290
- if kb .reduceTests and not intersect (payloadDbms , kb .reduceTests , True ):
293
+ elif kb .reduceTests and not intersect (payloadDbms , kb .reduceTests , True ):
291
294
debugMsg = "skipping test '%s' because the heuristic " % title
292
295
debugMsg += "tests showed that the back-end DBMS "
293
296
debugMsg += "could be '%s'" % unArrayizeValue (kb .reduceTests )
0 commit comments