ronin-sql 0.2.4 → 1.0.0
Sign up to get free protection for your applications and to get access to all the features.
- data/.document +4 -0
- data/.gitignore +11 -0
- data/.rspec +1 -0
- data/.yardopts +1 -0
- data/COPYING.txt +623 -288
- data/{History.txt → ChangeLog.md} +33 -35
- data/Gemfile +25 -0
- data/README.md +110 -0
- data/Rakefile +30 -20
- data/bin/ronin-sql +18 -5
- data/gemspec.yml +16 -0
- data/lib/ronin/formatting/extensions/sql.rb +4 -3
- data/lib/ronin/formatting/extensions/sql/string.rb +83 -10
- data/lib/ronin/formatting/sql.rb +4 -3
- data/lib/ronin/sql.rb +5 -12
- data/lib/ronin/{code/sql/create_index.rb → sql/binary_expr.rb} +25 -18
- data/lib/ronin/sql/clause.rb +72 -0
- data/lib/ronin/sql/clauses.rb +297 -0
- data/lib/ronin/sql/emittable.rb +84 -0
- data/lib/ronin/sql/emitter.rb +375 -0
- data/lib/ronin/sql/field.rb +106 -0
- data/lib/ronin/{code/sql/as.rb → sql/fields.rb} +36 -17
- data/lib/ronin/{code/sql/binary_expr.rb → sql/function.rb} +27 -27
- data/lib/ronin/sql/functions.rb +989 -0
- data/lib/ronin/sql/injection.rb +125 -157
- data/lib/ronin/{code/sql/default_values_clause.rb → sql/literal.rb} +13 -11
- data/lib/ronin/sql/literals.rb +72 -0
- data/lib/ronin/sql/operators.rb +332 -0
- data/lib/ronin/sql/sql.rb +86 -0
- data/lib/ronin/sql/statement.rb +70 -0
- data/lib/ronin/sql/statement_list.rb +110 -0
- data/lib/ronin/sql/statements.rb +115 -0
- data/lib/ronin/{code/sql/desc.rb → sql/unary_expr.rb} +11 -11
- data/lib/ronin/sql/version.rb +5 -4
- data/ronin-sql.gemspec +61 -0
- data/spec/formatting/sql/string_spec.rb +172 -0
- data/spec/spec_helper.rb +1 -4
- data/spec/sql/binary_expr.rb +5 -0
- data/spec/sql/binary_expr_examples.rb +25 -0
- data/spec/sql/clause_examples.rb +43 -0
- data/spec/sql/clause_spec.rb +31 -0
- data/spec/sql/clauses_spec.rb +43 -0
- data/spec/sql/emittable_spec.rb +41 -0
- data/spec/sql/emitter_spec.rb +472 -0
- data/spec/sql/field_spec.rb +103 -0
- data/spec/sql/fields_spec.rb +40 -0
- data/spec/sql/function_examples.rb +30 -0
- data/spec/sql/function_spec.rb +25 -0
- data/spec/sql/functions_spec.rb +110 -0
- data/spec/sql/injection_spec.rb +233 -0
- data/spec/sql/literal_spec.rb +5 -0
- data/spec/sql/literals_spec.rb +46 -0
- data/spec/sql/operators_spec.rb +44 -0
- data/spec/sql/sql_spec.rb +18 -0
- data/spec/sql/statement_examples.rb +39 -0
- data/spec/sql/statement_list_spec.rb +48 -0
- data/spec/sql/statement_sql.rb +38 -0
- data/spec/sql/statements_spec.rb +22 -0
- data/spec/sql/unary_expr.rb +5 -0
- data/spec/sql/unary_expr_examples.rb +20 -0
- metadata +116 -217
- data.tar.gz.sig +0 -0
- data/Manifest.txt +0 -108
- data/README.txt +0 -112
- data/lib/ronin/code/sql.rb +0 -22
- data/lib/ronin/code/sql/add_column_clause.rb +0 -42
- data/lib/ronin/code/sql/alter_table.rb +0 -52
- data/lib/ronin/code/sql/asc.rb +0 -36
- data/lib/ronin/code/sql/between.rb +0 -66
- data/lib/ronin/code/sql/clause.rb +0 -35
- data/lib/ronin/code/sql/code.rb +0 -35
- data/lib/ronin/code/sql/common_dialect.rb +0 -66
- data/lib/ronin/code/sql/create.rb +0 -74
- data/lib/ronin/code/sql/create_table.rb +0 -44
- data/lib/ronin/code/sql/create_view.rb +0 -41
- data/lib/ronin/code/sql/delete.rb +0 -52
- data/lib/ronin/code/sql/dialect.rb +0 -282
- data/lib/ronin/code/sql/drop.rb +0 -55
- data/lib/ronin/code/sql/drop_index.rb +0 -41
- data/lib/ronin/code/sql/drop_table.rb +0 -41
- data/lib/ronin/code/sql/drop_view.rb +0 -41
- data/lib/ronin/code/sql/emittable.rb +0 -100
- data/lib/ronin/code/sql/exceptions.rb +0 -24
- data/lib/ronin/code/sql/exceptions/unknown_clause.rb +0 -29
- data/lib/ronin/code/sql/exceptions/unknown_dialect.rb +0 -29
- data/lib/ronin/code/sql/exceptions/unknown_statement.rb +0 -29
- data/lib/ronin/code/sql/expr.rb +0 -102
- data/lib/ronin/code/sql/field.rb +0 -101
- data/lib/ronin/code/sql/fields_clause.rb +0 -46
- data/lib/ronin/code/sql/from_clause.rb +0 -42
- data/lib/ronin/code/sql/function.rb +0 -53
- data/lib/ronin/code/sql/group_by_clause.rb +0 -46
- data/lib/ronin/code/sql/having_clause.rb +0 -46
- data/lib/ronin/code/sql/in.rb +0 -47
- data/lib/ronin/code/sql/injected_statement.rb +0 -100
- data/lib/ronin/code/sql/injection.rb +0 -203
- data/lib/ronin/code/sql/insert.rb +0 -54
- data/lib/ronin/code/sql/intersect_clause.rb +0 -42
- data/lib/ronin/code/sql/join_clause.rb +0 -123
- data/lib/ronin/code/sql/like.rb +0 -73
- data/lib/ronin/code/sql/limit_clause.rb +0 -42
- data/lib/ronin/code/sql/modifier.rb +0 -48
- data/lib/ronin/code/sql/offset_clause.rb +0 -42
- data/lib/ronin/code/sql/on_clause.rb +0 -55
- data/lib/ronin/code/sql/order_by_clause.rb +0 -42
- data/lib/ronin/code/sql/program.rb +0 -225
- data/lib/ronin/code/sql/rename_to_clause.rb +0 -42
- data/lib/ronin/code/sql/replace.rb +0 -54
- data/lib/ronin/code/sql/select.rb +0 -103
- data/lib/ronin/code/sql/set_clause.rb +0 -42
- data/lib/ronin/code/sql/statement.rb +0 -180
- data/lib/ronin/code/sql/token.rb +0 -62
- data/lib/ronin/code/sql/unary_expr.rb +0 -47
- data/lib/ronin/code/sql/union_all_clause.rb +0 -42
- data/lib/ronin/code/sql/union_clause.rb +0 -42
- data/lib/ronin/code/sql/update.rb +0 -52
- data/lib/ronin/code/sql/values_clause.rb +0 -46
- data/lib/ronin/code/sql/where_clause.rb +0 -42
- data/lib/ronin/sql/error.rb +0 -26
- data/lib/ronin/sql/error/error.rb +0 -62
- data/lib/ronin/sql/error/extensions.rb +0 -22
- data/lib/ronin/sql/error/extensions/string.rb +0 -77
- data/lib/ronin/sql/error/message.rb +0 -62
- data/lib/ronin/sql/error/pattern.rb +0 -104
- data/lib/ronin/sql/error/patterns.rb +0 -99
- data/lib/ronin/sql/extensions.rb +0 -22
- data/lib/ronin/sql/extensions/uri.rb +0 -22
- data/lib/ronin/sql/extensions/uri/http.rb +0 -107
- data/spec/code/sql/common_dialect_spec.rb +0 -205
- data/spec/code/sql/create_examples.rb +0 -19
- data/spec/code/sql/create_index_spec.rb +0 -25
- data/spec/code/sql/create_table_spec.rb +0 -27
- data/spec/code/sql/create_view_spec.rb +0 -16
- data/spec/code/sql/delete_spec.rb +0 -14
- data/spec/code/sql/drop_examples.rb +0 -10
- data/spec/code/sql/drop_index_spec.rb +0 -16
- data/spec/code/sql/drop_table_spec.rb +0 -16
- data/spec/code/sql/drop_view_spec.rb +0 -16
- data/spec/code/sql/has_default_values_clause_examples.rb +0 -10
- data/spec/code/sql/has_fields_clause_examples.rb +0 -15
- data/spec/code/sql/has_from_clause_examples.rb +0 -13
- data/spec/code/sql/has_values_clause_examples.rb +0 -15
- data/spec/code/sql/has_where_clause_examples.rb +0 -15
- data/spec/code/sql/insert_spec.rb +0 -21
- data/spec/code/sql/replace_spec.rb +0 -21
- data/spec/code/sql/select_spec.rb +0 -105
- data/spec/code/sql/update_spec.rb +0 -26
- data/spec/helpers/code.rb +0 -14
- data/spec/sql/error_spec.rb +0 -24
- data/spec/sql/extensions/uri/http_spec.rb +0 -34
- data/spec/sql_spec.rb +0 -9
- data/tasks/spec.rb +0 -10
- data/tasks/yard.rb +0 -13
- metadata.gz.sig +0 -0
data/lib/ronin/code/sql/field.rb
DELETED
@@ -1,101 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/expr'
|
23
|
-
require 'ronin/code/sql/as'
|
24
|
-
require 'ronin/code/sql/between'
|
25
|
-
require 'ronin/code/sql/asc'
|
26
|
-
require 'ronin/code/sql/desc'
|
27
|
-
|
28
|
-
module Ronin
|
29
|
-
module Code
|
30
|
-
module SQL
|
31
|
-
class Field < Expr
|
32
|
-
|
33
|
-
def initialize(symbols,name,prefix=nil)
|
34
|
-
@symbols = symbols
|
35
|
-
@prefix = prefix
|
36
|
-
@name = name
|
37
|
-
end
|
38
|
-
|
39
|
-
def field(name)
|
40
|
-
sym = @symbols.symbol("#{path}.#{name}")
|
41
|
-
sym.value ||= Field.new(@symbols,name,self)
|
42
|
-
|
43
|
-
return sym
|
44
|
-
end
|
45
|
-
|
46
|
-
def all
|
47
|
-
field('*')
|
48
|
-
end
|
49
|
-
|
50
|
-
alias * all
|
51
|
-
|
52
|
-
def id
|
53
|
-
field('id')
|
54
|
-
end
|
55
|
-
|
56
|
-
def as(name)
|
57
|
-
As.new(self,name)
|
58
|
-
end
|
59
|
-
|
60
|
-
def between(start,stop)
|
61
|
-
Between.new(self,start,stop)
|
62
|
-
end
|
63
|
-
|
64
|
-
def <=>(range)
|
65
|
-
between(range.begin,range.end)
|
66
|
-
end
|
67
|
-
|
68
|
-
def asc
|
69
|
-
Asc.new(self)
|
70
|
-
end
|
71
|
-
|
72
|
-
def desc
|
73
|
-
Desc.new(self)
|
74
|
-
end
|
75
|
-
|
76
|
-
def emit
|
77
|
-
[path.to_sym]
|
78
|
-
end
|
79
|
-
|
80
|
-
protected
|
81
|
-
|
82
|
-
def path
|
83
|
-
if @prefix
|
84
|
-
return "#{@prefix}.#{@name}"
|
85
|
-
else
|
86
|
-
return "#{@name}"
|
87
|
-
end
|
88
|
-
end
|
89
|
-
|
90
|
-
def method_missing(name,*arguments,&block)
|
91
|
-
if (arguments.empty? && @prefix.nil? && block.nil?)
|
92
|
-
return field(name)
|
93
|
-
end
|
94
|
-
|
95
|
-
raise(NoMethodError,sym.id2name)
|
96
|
-
end
|
97
|
-
|
98
|
-
end
|
99
|
-
end
|
100
|
-
end
|
101
|
-
end
|
@@ -1,46 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class FieldsClause < Clause
|
28
|
-
|
29
|
-
# Fields of the clause
|
30
|
-
attr_accessor :fields
|
31
|
-
|
32
|
-
#
|
33
|
-
# Creates a new FieldsClause object with the specified _fields_.
|
34
|
-
#
|
35
|
-
def initialize(*fields)
|
36
|
-
@fields = fields
|
37
|
-
end
|
38
|
-
|
39
|
-
def emit
|
40
|
-
emit_row(@fields)
|
41
|
-
end
|
42
|
-
|
43
|
-
end
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
@@ -1,42 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class FromClause < Clause
|
28
|
-
|
29
|
-
attr_accessor :table
|
30
|
-
|
31
|
-
def initialize(table)
|
32
|
-
@table = table
|
33
|
-
end
|
34
|
-
|
35
|
-
def emit
|
36
|
-
emit_token('FROM') + emit_value(@table)
|
37
|
-
end
|
38
|
-
|
39
|
-
end
|
40
|
-
end
|
41
|
-
end
|
42
|
-
end
|
@@ -1,53 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/expr'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class Function < Expr
|
28
|
-
|
29
|
-
# Name of the function
|
30
|
-
attr_reader :name
|
31
|
-
|
32
|
-
# Fields passed to the function
|
33
|
-
attr_reader :fields
|
34
|
-
|
35
|
-
def initialize(name,*fields)
|
36
|
-
@name = name
|
37
|
-
@fields = fields
|
38
|
-
end
|
39
|
-
|
40
|
-
def emit
|
41
|
-
tokens = emit_token(@name)
|
42
|
-
|
43
|
-
tokens << Token.open_paren
|
44
|
-
tokens += emit_list(@fields)
|
45
|
-
tokens << Token.close_paren
|
46
|
-
|
47
|
-
return tokens
|
48
|
-
end
|
49
|
-
|
50
|
-
end
|
51
|
-
end
|
52
|
-
end
|
53
|
-
end
|
@@ -1,46 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class GroupByClause < Clause
|
28
|
-
|
29
|
-
# Fields to group
|
30
|
-
attr_accessor :fields
|
31
|
-
|
32
|
-
#
|
33
|
-
# Creates a new GroupByClause object with the specified _fields_.
|
34
|
-
#
|
35
|
-
def initialize(*fields)
|
36
|
-
@fields = fields
|
37
|
-
end
|
38
|
-
|
39
|
-
def emit
|
40
|
-
emit_token('GROUP BY') + emit_list(@fields)
|
41
|
-
end
|
42
|
-
|
43
|
-
end
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
@@ -1,46 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class HavingClause < Clause
|
28
|
-
|
29
|
-
# Expression of the having clause
|
30
|
-
attr_accessor :expr
|
31
|
-
|
32
|
-
#
|
33
|
-
# Creates a new HavingClause object with the specified _expr_.
|
34
|
-
#
|
35
|
-
def initialize(expr)
|
36
|
-
@expr = expr
|
37
|
-
end
|
38
|
-
|
39
|
-
def emit
|
40
|
-
emit_token('HAVING') + emit_value(@expr)
|
41
|
-
end
|
42
|
-
|
43
|
-
end
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
data/lib/ronin/code/sql/in.rb
DELETED
@@ -1,47 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/expr'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class In < Expr
|
28
|
-
|
29
|
-
# Field
|
30
|
-
attr_reader :field
|
31
|
-
|
32
|
-
# Range
|
33
|
-
attr_reader :range
|
34
|
-
|
35
|
-
def initialize(field,*range)
|
36
|
-
@field = field
|
37
|
-
@range = range
|
38
|
-
end
|
39
|
-
|
40
|
-
def emit
|
41
|
-
emit_value(@field) + emit_token('IN') + emit_values(@range)
|
42
|
-
end
|
43
|
-
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
47
|
-
end
|
@@ -1,100 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/statement'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class InjectedStatement < Statement
|
28
|
-
|
29
|
-
# Injected expressions
|
30
|
-
attr_reader :expressions
|
31
|
-
|
32
|
-
def initialize(dialect,&block)
|
33
|
-
@expressions = []
|
34
|
-
|
35
|
-
super(dialect,&block)
|
36
|
-
end
|
37
|
-
|
38
|
-
def inject_and(expr)
|
39
|
-
@expressions += [Token.new('AND'), expr]
|
40
|
-
return self
|
41
|
-
end
|
42
|
-
|
43
|
-
def inject_or(expr)
|
44
|
-
@expressions += [Token.new('OR'), expr]
|
45
|
-
return self
|
46
|
-
end
|
47
|
-
|
48
|
-
def all_rows(value=1)
|
49
|
-
inject_or(BinaryExpr.new('=',value,value))
|
50
|
-
end
|
51
|
-
|
52
|
-
def exact_rows(value=1)
|
53
|
-
inject_and(BinaryExpr.new('=',value,value))
|
54
|
-
end
|
55
|
-
|
56
|
-
def no_rows
|
57
|
-
inject_and(BinaryExpr.new('=',1,0))
|
58
|
-
end
|
59
|
-
|
60
|
-
def has_column?(name)
|
61
|
-
inject_or(field(name).is_not?(null))
|
62
|
-
end
|
63
|
-
|
64
|
-
def has_table?(table)
|
65
|
-
inject_and(select(:from => table,:fields => count(all)) == 1)
|
66
|
-
end
|
67
|
-
|
68
|
-
def uses_column?(name)
|
69
|
-
group_by(name)
|
70
|
-
|
71
|
-
having(BinaryExpr.new('=',1,1))
|
72
|
-
return self
|
73
|
-
end
|
74
|
-
|
75
|
-
def uses_table?(table)
|
76
|
-
inject_or(table.is_not?(null))
|
77
|
-
end
|
78
|
-
|
79
|
-
def emit
|
80
|
-
emit_values(@expressions) + super
|
81
|
-
end
|
82
|
-
|
83
|
-
protected
|
84
|
-
|
85
|
-
def clause(name,*arguments)
|
86
|
-
dialect.caluse(name,*arguments)
|
87
|
-
end
|
88
|
-
|
89
|
-
def method_missing(name,*arguments,&block)
|
90
|
-
if (@dialect.has_clause?(name) && block.nil?)
|
91
|
-
return @dialect.clause(name,*arguments)
|
92
|
-
end
|
93
|
-
|
94
|
-
return super(name,*arguments,&block)
|
95
|
-
end
|
96
|
-
|
97
|
-
end
|
98
|
-
end
|
99
|
-
end
|
100
|
-
end
|