ronin-sql 0.2.4 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/.document +4 -0
- data/.gitignore +11 -0
- data/.rspec +1 -0
- data/.yardopts +1 -0
- data/COPYING.txt +623 -288
- data/{History.txt → ChangeLog.md} +33 -35
- data/Gemfile +25 -0
- data/README.md +110 -0
- data/Rakefile +30 -20
- data/bin/ronin-sql +18 -5
- data/gemspec.yml +16 -0
- data/lib/ronin/formatting/extensions/sql.rb +4 -3
- data/lib/ronin/formatting/extensions/sql/string.rb +83 -10
- data/lib/ronin/formatting/sql.rb +4 -3
- data/lib/ronin/sql.rb +5 -12
- data/lib/ronin/{code/sql/create_index.rb → sql/binary_expr.rb} +25 -18
- data/lib/ronin/sql/clause.rb +72 -0
- data/lib/ronin/sql/clauses.rb +297 -0
- data/lib/ronin/sql/emittable.rb +84 -0
- data/lib/ronin/sql/emitter.rb +375 -0
- data/lib/ronin/sql/field.rb +106 -0
- data/lib/ronin/{code/sql/as.rb → sql/fields.rb} +36 -17
- data/lib/ronin/{code/sql/binary_expr.rb → sql/function.rb} +27 -27
- data/lib/ronin/sql/functions.rb +989 -0
- data/lib/ronin/sql/injection.rb +125 -157
- data/lib/ronin/{code/sql/default_values_clause.rb → sql/literal.rb} +13 -11
- data/lib/ronin/sql/literals.rb +72 -0
- data/lib/ronin/sql/operators.rb +332 -0
- data/lib/ronin/sql/sql.rb +86 -0
- data/lib/ronin/sql/statement.rb +70 -0
- data/lib/ronin/sql/statement_list.rb +110 -0
- data/lib/ronin/sql/statements.rb +115 -0
- data/lib/ronin/{code/sql/desc.rb → sql/unary_expr.rb} +11 -11
- data/lib/ronin/sql/version.rb +5 -4
- data/ronin-sql.gemspec +61 -0
- data/spec/formatting/sql/string_spec.rb +172 -0
- data/spec/spec_helper.rb +1 -4
- data/spec/sql/binary_expr.rb +5 -0
- data/spec/sql/binary_expr_examples.rb +25 -0
- data/spec/sql/clause_examples.rb +43 -0
- data/spec/sql/clause_spec.rb +31 -0
- data/spec/sql/clauses_spec.rb +43 -0
- data/spec/sql/emittable_spec.rb +41 -0
- data/spec/sql/emitter_spec.rb +472 -0
- data/spec/sql/field_spec.rb +103 -0
- data/spec/sql/fields_spec.rb +40 -0
- data/spec/sql/function_examples.rb +30 -0
- data/spec/sql/function_spec.rb +25 -0
- data/spec/sql/functions_spec.rb +110 -0
- data/spec/sql/injection_spec.rb +233 -0
- data/spec/sql/literal_spec.rb +5 -0
- data/spec/sql/literals_spec.rb +46 -0
- data/spec/sql/operators_spec.rb +44 -0
- data/spec/sql/sql_spec.rb +18 -0
- data/spec/sql/statement_examples.rb +39 -0
- data/spec/sql/statement_list_spec.rb +48 -0
- data/spec/sql/statement_sql.rb +38 -0
- data/spec/sql/statements_spec.rb +22 -0
- data/spec/sql/unary_expr.rb +5 -0
- data/spec/sql/unary_expr_examples.rb +20 -0
- metadata +116 -217
- data.tar.gz.sig +0 -0
- data/Manifest.txt +0 -108
- data/README.txt +0 -112
- data/lib/ronin/code/sql.rb +0 -22
- data/lib/ronin/code/sql/add_column_clause.rb +0 -42
- data/lib/ronin/code/sql/alter_table.rb +0 -52
- data/lib/ronin/code/sql/asc.rb +0 -36
- data/lib/ronin/code/sql/between.rb +0 -66
- data/lib/ronin/code/sql/clause.rb +0 -35
- data/lib/ronin/code/sql/code.rb +0 -35
- data/lib/ronin/code/sql/common_dialect.rb +0 -66
- data/lib/ronin/code/sql/create.rb +0 -74
- data/lib/ronin/code/sql/create_table.rb +0 -44
- data/lib/ronin/code/sql/create_view.rb +0 -41
- data/lib/ronin/code/sql/delete.rb +0 -52
- data/lib/ronin/code/sql/dialect.rb +0 -282
- data/lib/ronin/code/sql/drop.rb +0 -55
- data/lib/ronin/code/sql/drop_index.rb +0 -41
- data/lib/ronin/code/sql/drop_table.rb +0 -41
- data/lib/ronin/code/sql/drop_view.rb +0 -41
- data/lib/ronin/code/sql/emittable.rb +0 -100
- data/lib/ronin/code/sql/exceptions.rb +0 -24
- data/lib/ronin/code/sql/exceptions/unknown_clause.rb +0 -29
- data/lib/ronin/code/sql/exceptions/unknown_dialect.rb +0 -29
- data/lib/ronin/code/sql/exceptions/unknown_statement.rb +0 -29
- data/lib/ronin/code/sql/expr.rb +0 -102
- data/lib/ronin/code/sql/field.rb +0 -101
- data/lib/ronin/code/sql/fields_clause.rb +0 -46
- data/lib/ronin/code/sql/from_clause.rb +0 -42
- data/lib/ronin/code/sql/function.rb +0 -53
- data/lib/ronin/code/sql/group_by_clause.rb +0 -46
- data/lib/ronin/code/sql/having_clause.rb +0 -46
- data/lib/ronin/code/sql/in.rb +0 -47
- data/lib/ronin/code/sql/injected_statement.rb +0 -100
- data/lib/ronin/code/sql/injection.rb +0 -203
- data/lib/ronin/code/sql/insert.rb +0 -54
- data/lib/ronin/code/sql/intersect_clause.rb +0 -42
- data/lib/ronin/code/sql/join_clause.rb +0 -123
- data/lib/ronin/code/sql/like.rb +0 -73
- data/lib/ronin/code/sql/limit_clause.rb +0 -42
- data/lib/ronin/code/sql/modifier.rb +0 -48
- data/lib/ronin/code/sql/offset_clause.rb +0 -42
- data/lib/ronin/code/sql/on_clause.rb +0 -55
- data/lib/ronin/code/sql/order_by_clause.rb +0 -42
- data/lib/ronin/code/sql/program.rb +0 -225
- data/lib/ronin/code/sql/rename_to_clause.rb +0 -42
- data/lib/ronin/code/sql/replace.rb +0 -54
- data/lib/ronin/code/sql/select.rb +0 -103
- data/lib/ronin/code/sql/set_clause.rb +0 -42
- data/lib/ronin/code/sql/statement.rb +0 -180
- data/lib/ronin/code/sql/token.rb +0 -62
- data/lib/ronin/code/sql/unary_expr.rb +0 -47
- data/lib/ronin/code/sql/union_all_clause.rb +0 -42
- data/lib/ronin/code/sql/union_clause.rb +0 -42
- data/lib/ronin/code/sql/update.rb +0 -52
- data/lib/ronin/code/sql/values_clause.rb +0 -46
- data/lib/ronin/code/sql/where_clause.rb +0 -42
- data/lib/ronin/sql/error.rb +0 -26
- data/lib/ronin/sql/error/error.rb +0 -62
- data/lib/ronin/sql/error/extensions.rb +0 -22
- data/lib/ronin/sql/error/extensions/string.rb +0 -77
- data/lib/ronin/sql/error/message.rb +0 -62
- data/lib/ronin/sql/error/pattern.rb +0 -104
- data/lib/ronin/sql/error/patterns.rb +0 -99
- data/lib/ronin/sql/extensions.rb +0 -22
- data/lib/ronin/sql/extensions/uri.rb +0 -22
- data/lib/ronin/sql/extensions/uri/http.rb +0 -107
- data/spec/code/sql/common_dialect_spec.rb +0 -205
- data/spec/code/sql/create_examples.rb +0 -19
- data/spec/code/sql/create_index_spec.rb +0 -25
- data/spec/code/sql/create_table_spec.rb +0 -27
- data/spec/code/sql/create_view_spec.rb +0 -16
- data/spec/code/sql/delete_spec.rb +0 -14
- data/spec/code/sql/drop_examples.rb +0 -10
- data/spec/code/sql/drop_index_spec.rb +0 -16
- data/spec/code/sql/drop_table_spec.rb +0 -16
- data/spec/code/sql/drop_view_spec.rb +0 -16
- data/spec/code/sql/has_default_values_clause_examples.rb +0 -10
- data/spec/code/sql/has_fields_clause_examples.rb +0 -15
- data/spec/code/sql/has_from_clause_examples.rb +0 -13
- data/spec/code/sql/has_values_clause_examples.rb +0 -15
- data/spec/code/sql/has_where_clause_examples.rb +0 -15
- data/spec/code/sql/insert_spec.rb +0 -21
- data/spec/code/sql/replace_spec.rb +0 -21
- data/spec/code/sql/select_spec.rb +0 -105
- data/spec/code/sql/update_spec.rb +0 -26
- data/spec/helpers/code.rb +0 -14
- data/spec/sql/error_spec.rb +0 -24
- data/spec/sql/extensions/uri/http_spec.rb +0 -34
- data/spec/sql_spec.rb +0 -9
- data/tasks/spec.rb +0 -10
- data/tasks/yard.rb +0 -13
- metadata.gz.sig +0 -0
data/lib/ronin/code/sql/field.rb
DELETED
@@ -1,101 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/expr'
|
23
|
-
require 'ronin/code/sql/as'
|
24
|
-
require 'ronin/code/sql/between'
|
25
|
-
require 'ronin/code/sql/asc'
|
26
|
-
require 'ronin/code/sql/desc'
|
27
|
-
|
28
|
-
module Ronin
|
29
|
-
module Code
|
30
|
-
module SQL
|
31
|
-
class Field < Expr
|
32
|
-
|
33
|
-
def initialize(symbols,name,prefix=nil)
|
34
|
-
@symbols = symbols
|
35
|
-
@prefix = prefix
|
36
|
-
@name = name
|
37
|
-
end
|
38
|
-
|
39
|
-
def field(name)
|
40
|
-
sym = @symbols.symbol("#{path}.#{name}")
|
41
|
-
sym.value ||= Field.new(@symbols,name,self)
|
42
|
-
|
43
|
-
return sym
|
44
|
-
end
|
45
|
-
|
46
|
-
def all
|
47
|
-
field('*')
|
48
|
-
end
|
49
|
-
|
50
|
-
alias * all
|
51
|
-
|
52
|
-
def id
|
53
|
-
field('id')
|
54
|
-
end
|
55
|
-
|
56
|
-
def as(name)
|
57
|
-
As.new(self,name)
|
58
|
-
end
|
59
|
-
|
60
|
-
def between(start,stop)
|
61
|
-
Between.new(self,start,stop)
|
62
|
-
end
|
63
|
-
|
64
|
-
def <=>(range)
|
65
|
-
between(range.begin,range.end)
|
66
|
-
end
|
67
|
-
|
68
|
-
def asc
|
69
|
-
Asc.new(self)
|
70
|
-
end
|
71
|
-
|
72
|
-
def desc
|
73
|
-
Desc.new(self)
|
74
|
-
end
|
75
|
-
|
76
|
-
def emit
|
77
|
-
[path.to_sym]
|
78
|
-
end
|
79
|
-
|
80
|
-
protected
|
81
|
-
|
82
|
-
def path
|
83
|
-
if @prefix
|
84
|
-
return "#{@prefix}.#{@name}"
|
85
|
-
else
|
86
|
-
return "#{@name}"
|
87
|
-
end
|
88
|
-
end
|
89
|
-
|
90
|
-
def method_missing(name,*arguments,&block)
|
91
|
-
if (arguments.empty? && @prefix.nil? && block.nil?)
|
92
|
-
return field(name)
|
93
|
-
end
|
94
|
-
|
95
|
-
raise(NoMethodError,sym.id2name)
|
96
|
-
end
|
97
|
-
|
98
|
-
end
|
99
|
-
end
|
100
|
-
end
|
101
|
-
end
|
@@ -1,46 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class FieldsClause < Clause
|
28
|
-
|
29
|
-
# Fields of the clause
|
30
|
-
attr_accessor :fields
|
31
|
-
|
32
|
-
#
|
33
|
-
# Creates a new FieldsClause object with the specified _fields_.
|
34
|
-
#
|
35
|
-
def initialize(*fields)
|
36
|
-
@fields = fields
|
37
|
-
end
|
38
|
-
|
39
|
-
def emit
|
40
|
-
emit_row(@fields)
|
41
|
-
end
|
42
|
-
|
43
|
-
end
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
@@ -1,42 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class FromClause < Clause
|
28
|
-
|
29
|
-
attr_accessor :table
|
30
|
-
|
31
|
-
def initialize(table)
|
32
|
-
@table = table
|
33
|
-
end
|
34
|
-
|
35
|
-
def emit
|
36
|
-
emit_token('FROM') + emit_value(@table)
|
37
|
-
end
|
38
|
-
|
39
|
-
end
|
40
|
-
end
|
41
|
-
end
|
42
|
-
end
|
@@ -1,53 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/expr'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class Function < Expr
|
28
|
-
|
29
|
-
# Name of the function
|
30
|
-
attr_reader :name
|
31
|
-
|
32
|
-
# Fields passed to the function
|
33
|
-
attr_reader :fields
|
34
|
-
|
35
|
-
def initialize(name,*fields)
|
36
|
-
@name = name
|
37
|
-
@fields = fields
|
38
|
-
end
|
39
|
-
|
40
|
-
def emit
|
41
|
-
tokens = emit_token(@name)
|
42
|
-
|
43
|
-
tokens << Token.open_paren
|
44
|
-
tokens += emit_list(@fields)
|
45
|
-
tokens << Token.close_paren
|
46
|
-
|
47
|
-
return tokens
|
48
|
-
end
|
49
|
-
|
50
|
-
end
|
51
|
-
end
|
52
|
-
end
|
53
|
-
end
|
@@ -1,46 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class GroupByClause < Clause
|
28
|
-
|
29
|
-
# Fields to group
|
30
|
-
attr_accessor :fields
|
31
|
-
|
32
|
-
#
|
33
|
-
# Creates a new GroupByClause object with the specified _fields_.
|
34
|
-
#
|
35
|
-
def initialize(*fields)
|
36
|
-
@fields = fields
|
37
|
-
end
|
38
|
-
|
39
|
-
def emit
|
40
|
-
emit_token('GROUP BY') + emit_list(@fields)
|
41
|
-
end
|
42
|
-
|
43
|
-
end
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
@@ -1,46 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/clause'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class HavingClause < Clause
|
28
|
-
|
29
|
-
# Expression of the having clause
|
30
|
-
attr_accessor :expr
|
31
|
-
|
32
|
-
#
|
33
|
-
# Creates a new HavingClause object with the specified _expr_.
|
34
|
-
#
|
35
|
-
def initialize(expr)
|
36
|
-
@expr = expr
|
37
|
-
end
|
38
|
-
|
39
|
-
def emit
|
40
|
-
emit_token('HAVING') + emit_value(@expr)
|
41
|
-
end
|
42
|
-
|
43
|
-
end
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
data/lib/ronin/code/sql/in.rb
DELETED
@@ -1,47 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/expr'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class In < Expr
|
28
|
-
|
29
|
-
# Field
|
30
|
-
attr_reader :field
|
31
|
-
|
32
|
-
# Range
|
33
|
-
attr_reader :range
|
34
|
-
|
35
|
-
def initialize(field,*range)
|
36
|
-
@field = field
|
37
|
-
@range = range
|
38
|
-
end
|
39
|
-
|
40
|
-
def emit
|
41
|
-
emit_value(@field) + emit_token('IN') + emit_values(@range)
|
42
|
-
end
|
43
|
-
|
44
|
-
end
|
45
|
-
end
|
46
|
-
end
|
47
|
-
end
|
@@ -1,100 +0,0 @@
|
|
1
|
-
#
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
3
|
-
# tasks.
|
4
|
-
#
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
6
|
-
#
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
10
|
-
# (at your option) any later version.
|
11
|
-
#
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
15
|
-
# GNU General Public License for more details.
|
16
|
-
#
|
17
|
-
# You should have received a copy of the GNU General Public License
|
18
|
-
# along with this program; if not, write to the Free Software
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
20
|
-
#
|
21
|
-
|
22
|
-
require 'ronin/code/sql/statement'
|
23
|
-
|
24
|
-
module Ronin
|
25
|
-
module Code
|
26
|
-
module SQL
|
27
|
-
class InjectedStatement < Statement
|
28
|
-
|
29
|
-
# Injected expressions
|
30
|
-
attr_reader :expressions
|
31
|
-
|
32
|
-
def initialize(dialect,&block)
|
33
|
-
@expressions = []
|
34
|
-
|
35
|
-
super(dialect,&block)
|
36
|
-
end
|
37
|
-
|
38
|
-
def inject_and(expr)
|
39
|
-
@expressions += [Token.new('AND'), expr]
|
40
|
-
return self
|
41
|
-
end
|
42
|
-
|
43
|
-
def inject_or(expr)
|
44
|
-
@expressions += [Token.new('OR'), expr]
|
45
|
-
return self
|
46
|
-
end
|
47
|
-
|
48
|
-
def all_rows(value=1)
|
49
|
-
inject_or(BinaryExpr.new('=',value,value))
|
50
|
-
end
|
51
|
-
|
52
|
-
def exact_rows(value=1)
|
53
|
-
inject_and(BinaryExpr.new('=',value,value))
|
54
|
-
end
|
55
|
-
|
56
|
-
def no_rows
|
57
|
-
inject_and(BinaryExpr.new('=',1,0))
|
58
|
-
end
|
59
|
-
|
60
|
-
def has_column?(name)
|
61
|
-
inject_or(field(name).is_not?(null))
|
62
|
-
end
|
63
|
-
|
64
|
-
def has_table?(table)
|
65
|
-
inject_and(select(:from => table,:fields => count(all)) == 1)
|
66
|
-
end
|
67
|
-
|
68
|
-
def uses_column?(name)
|
69
|
-
group_by(name)
|
70
|
-
|
71
|
-
having(BinaryExpr.new('=',1,1))
|
72
|
-
return self
|
73
|
-
end
|
74
|
-
|
75
|
-
def uses_table?(table)
|
76
|
-
inject_or(table.is_not?(null))
|
77
|
-
end
|
78
|
-
|
79
|
-
def emit
|
80
|
-
emit_values(@expressions) + super
|
81
|
-
end
|
82
|
-
|
83
|
-
protected
|
84
|
-
|
85
|
-
def clause(name,*arguments)
|
86
|
-
dialect.caluse(name,*arguments)
|
87
|
-
end
|
88
|
-
|
89
|
-
def method_missing(name,*arguments,&block)
|
90
|
-
if (@dialect.has_clause?(name) && block.nil?)
|
91
|
-
return @dialect.clause(name,*arguments)
|
92
|
-
end
|
93
|
-
|
94
|
-
return super(name,*arguments,&block)
|
95
|
-
end
|
96
|
-
|
97
|
-
end
|
98
|
-
end
|
99
|
-
end
|
100
|
-
end
|