ronin-sql 0.2.4 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/.document +4 -0
- data/.gitignore +11 -0
- data/.rspec +1 -0
- data/.yardopts +1 -0
- data/COPYING.txt +623 -288
- data/{History.txt → ChangeLog.md} +33 -35
- data/Gemfile +25 -0
- data/README.md +110 -0
- data/Rakefile +30 -20
- data/bin/ronin-sql +18 -5
- data/gemspec.yml +16 -0
- data/lib/ronin/formatting/extensions/sql.rb +4 -3
- data/lib/ronin/formatting/extensions/sql/string.rb +83 -10
- data/lib/ronin/formatting/sql.rb +4 -3
- data/lib/ronin/sql.rb +5 -12
- data/lib/ronin/{code/sql/create_index.rb → sql/binary_expr.rb} +25 -18
- data/lib/ronin/sql/clause.rb +72 -0
- data/lib/ronin/sql/clauses.rb +297 -0
- data/lib/ronin/sql/emittable.rb +84 -0
- data/lib/ronin/sql/emitter.rb +375 -0
- data/lib/ronin/sql/field.rb +106 -0
- data/lib/ronin/{code/sql/as.rb → sql/fields.rb} +36 -17
- data/lib/ronin/{code/sql/binary_expr.rb → sql/function.rb} +27 -27
- data/lib/ronin/sql/functions.rb +989 -0
- data/lib/ronin/sql/injection.rb +125 -157
- data/lib/ronin/{code/sql/default_values_clause.rb → sql/literal.rb} +13 -11
- data/lib/ronin/sql/literals.rb +72 -0
- data/lib/ronin/sql/operators.rb +332 -0
- data/lib/ronin/sql/sql.rb +86 -0
- data/lib/ronin/sql/statement.rb +70 -0
- data/lib/ronin/sql/statement_list.rb +110 -0
- data/lib/ronin/sql/statements.rb +115 -0
- data/lib/ronin/{code/sql/desc.rb → sql/unary_expr.rb} +11 -11
- data/lib/ronin/sql/version.rb +5 -4
- data/ronin-sql.gemspec +61 -0
- data/spec/formatting/sql/string_spec.rb +172 -0
- data/spec/spec_helper.rb +1 -4
- data/spec/sql/binary_expr.rb +5 -0
- data/spec/sql/binary_expr_examples.rb +25 -0
- data/spec/sql/clause_examples.rb +43 -0
- data/spec/sql/clause_spec.rb +31 -0
- data/spec/sql/clauses_spec.rb +43 -0
- data/spec/sql/emittable_spec.rb +41 -0
- data/spec/sql/emitter_spec.rb +472 -0
- data/spec/sql/field_spec.rb +103 -0
- data/spec/sql/fields_spec.rb +40 -0
- data/spec/sql/function_examples.rb +30 -0
- data/spec/sql/function_spec.rb +25 -0
- data/spec/sql/functions_spec.rb +110 -0
- data/spec/sql/injection_spec.rb +233 -0
- data/spec/sql/literal_spec.rb +5 -0
- data/spec/sql/literals_spec.rb +46 -0
- data/spec/sql/operators_spec.rb +44 -0
- data/spec/sql/sql_spec.rb +18 -0
- data/spec/sql/statement_examples.rb +39 -0
- data/spec/sql/statement_list_spec.rb +48 -0
- data/spec/sql/statement_sql.rb +38 -0
- data/spec/sql/statements_spec.rb +22 -0
- data/spec/sql/unary_expr.rb +5 -0
- data/spec/sql/unary_expr_examples.rb +20 -0
- metadata +116 -217
- data.tar.gz.sig +0 -0
- data/Manifest.txt +0 -108
- data/README.txt +0 -112
- data/lib/ronin/code/sql.rb +0 -22
- data/lib/ronin/code/sql/add_column_clause.rb +0 -42
- data/lib/ronin/code/sql/alter_table.rb +0 -52
- data/lib/ronin/code/sql/asc.rb +0 -36
- data/lib/ronin/code/sql/between.rb +0 -66
- data/lib/ronin/code/sql/clause.rb +0 -35
- data/lib/ronin/code/sql/code.rb +0 -35
- data/lib/ronin/code/sql/common_dialect.rb +0 -66
- data/lib/ronin/code/sql/create.rb +0 -74
- data/lib/ronin/code/sql/create_table.rb +0 -44
- data/lib/ronin/code/sql/create_view.rb +0 -41
- data/lib/ronin/code/sql/delete.rb +0 -52
- data/lib/ronin/code/sql/dialect.rb +0 -282
- data/lib/ronin/code/sql/drop.rb +0 -55
- data/lib/ronin/code/sql/drop_index.rb +0 -41
- data/lib/ronin/code/sql/drop_table.rb +0 -41
- data/lib/ronin/code/sql/drop_view.rb +0 -41
- data/lib/ronin/code/sql/emittable.rb +0 -100
- data/lib/ronin/code/sql/exceptions.rb +0 -24
- data/lib/ronin/code/sql/exceptions/unknown_clause.rb +0 -29
- data/lib/ronin/code/sql/exceptions/unknown_dialect.rb +0 -29
- data/lib/ronin/code/sql/exceptions/unknown_statement.rb +0 -29
- data/lib/ronin/code/sql/expr.rb +0 -102
- data/lib/ronin/code/sql/field.rb +0 -101
- data/lib/ronin/code/sql/fields_clause.rb +0 -46
- data/lib/ronin/code/sql/from_clause.rb +0 -42
- data/lib/ronin/code/sql/function.rb +0 -53
- data/lib/ronin/code/sql/group_by_clause.rb +0 -46
- data/lib/ronin/code/sql/having_clause.rb +0 -46
- data/lib/ronin/code/sql/in.rb +0 -47
- data/lib/ronin/code/sql/injected_statement.rb +0 -100
- data/lib/ronin/code/sql/injection.rb +0 -203
- data/lib/ronin/code/sql/insert.rb +0 -54
- data/lib/ronin/code/sql/intersect_clause.rb +0 -42
- data/lib/ronin/code/sql/join_clause.rb +0 -123
- data/lib/ronin/code/sql/like.rb +0 -73
- data/lib/ronin/code/sql/limit_clause.rb +0 -42
- data/lib/ronin/code/sql/modifier.rb +0 -48
- data/lib/ronin/code/sql/offset_clause.rb +0 -42
- data/lib/ronin/code/sql/on_clause.rb +0 -55
- data/lib/ronin/code/sql/order_by_clause.rb +0 -42
- data/lib/ronin/code/sql/program.rb +0 -225
- data/lib/ronin/code/sql/rename_to_clause.rb +0 -42
- data/lib/ronin/code/sql/replace.rb +0 -54
- data/lib/ronin/code/sql/select.rb +0 -103
- data/lib/ronin/code/sql/set_clause.rb +0 -42
- data/lib/ronin/code/sql/statement.rb +0 -180
- data/lib/ronin/code/sql/token.rb +0 -62
- data/lib/ronin/code/sql/unary_expr.rb +0 -47
- data/lib/ronin/code/sql/union_all_clause.rb +0 -42
- data/lib/ronin/code/sql/union_clause.rb +0 -42
- data/lib/ronin/code/sql/update.rb +0 -52
- data/lib/ronin/code/sql/values_clause.rb +0 -46
- data/lib/ronin/code/sql/where_clause.rb +0 -42
- data/lib/ronin/sql/error.rb +0 -26
- data/lib/ronin/sql/error/error.rb +0 -62
- data/lib/ronin/sql/error/extensions.rb +0 -22
- data/lib/ronin/sql/error/extensions/string.rb +0 -77
- data/lib/ronin/sql/error/message.rb +0 -62
- data/lib/ronin/sql/error/pattern.rb +0 -104
- data/lib/ronin/sql/error/patterns.rb +0 -99
- data/lib/ronin/sql/extensions.rb +0 -22
- data/lib/ronin/sql/extensions/uri.rb +0 -22
- data/lib/ronin/sql/extensions/uri/http.rb +0 -107
- data/spec/code/sql/common_dialect_spec.rb +0 -205
- data/spec/code/sql/create_examples.rb +0 -19
- data/spec/code/sql/create_index_spec.rb +0 -25
- data/spec/code/sql/create_table_spec.rb +0 -27
- data/spec/code/sql/create_view_spec.rb +0 -16
- data/spec/code/sql/delete_spec.rb +0 -14
- data/spec/code/sql/drop_examples.rb +0 -10
- data/spec/code/sql/drop_index_spec.rb +0 -16
- data/spec/code/sql/drop_table_spec.rb +0 -16
- data/spec/code/sql/drop_view_spec.rb +0 -16
- data/spec/code/sql/has_default_values_clause_examples.rb +0 -10
- data/spec/code/sql/has_fields_clause_examples.rb +0 -15
- data/spec/code/sql/has_from_clause_examples.rb +0 -13
- data/spec/code/sql/has_values_clause_examples.rb +0 -15
- data/spec/code/sql/has_where_clause_examples.rb +0 -15
- data/spec/code/sql/insert_spec.rb +0 -21
- data/spec/code/sql/replace_spec.rb +0 -21
- data/spec/code/sql/select_spec.rb +0 -105
- data/spec/code/sql/update_spec.rb +0 -26
- data/spec/helpers/code.rb +0 -14
- data/spec/sql/error_spec.rb +0 -24
- data/spec/sql/extensions/uri/http_spec.rb +0 -34
- data/spec/sql_spec.rb +0 -9
- data/tasks/spec.rb +0 -10
- data/tasks/yard.rb +0 -13
- metadata.gz.sig +0 -0
|
@@ -1,47 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/code/sql/expr'
|
|
23
|
-
|
|
24
|
-
module Ronin
|
|
25
|
-
module Code
|
|
26
|
-
module SQL
|
|
27
|
-
class UnaryExpr < Expr
|
|
28
|
-
|
|
29
|
-
# Operator
|
|
30
|
-
attr_reader :op
|
|
31
|
-
|
|
32
|
-
# Expression
|
|
33
|
-
attr_reader :expr
|
|
34
|
-
|
|
35
|
-
def initialize(op,expr)
|
|
36
|
-
@op = op
|
|
37
|
-
@expr = expr
|
|
38
|
-
end
|
|
39
|
-
|
|
40
|
-
def emit
|
|
41
|
-
emit_token(@op) + emit_value(@expr)
|
|
42
|
-
end
|
|
43
|
-
|
|
44
|
-
end
|
|
45
|
-
end
|
|
46
|
-
end
|
|
47
|
-
end
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/code/sql/clause'
|
|
23
|
-
|
|
24
|
-
module Ronin
|
|
25
|
-
module Code
|
|
26
|
-
module SQL
|
|
27
|
-
class UnionAllClause < Clause
|
|
28
|
-
|
|
29
|
-
attr_accessor :select
|
|
30
|
-
|
|
31
|
-
def initialize(select)
|
|
32
|
-
@select = select
|
|
33
|
-
end
|
|
34
|
-
|
|
35
|
-
def emit
|
|
36
|
-
emit_token('UNION ALL') + emit_statement(@select)
|
|
37
|
-
end
|
|
38
|
-
|
|
39
|
-
end
|
|
40
|
-
end
|
|
41
|
-
end
|
|
42
|
-
end
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/code/sql/clause'
|
|
23
|
-
|
|
24
|
-
module Ronin
|
|
25
|
-
module Code
|
|
26
|
-
module SQL
|
|
27
|
-
class UnionClause < Clause
|
|
28
|
-
|
|
29
|
-
attr_accessor :select
|
|
30
|
-
|
|
31
|
-
def initialize(select)
|
|
32
|
-
@select = select
|
|
33
|
-
end
|
|
34
|
-
|
|
35
|
-
def emit
|
|
36
|
-
emit_token('UNION') + emit_statement(@select)
|
|
37
|
-
end
|
|
38
|
-
|
|
39
|
-
end
|
|
40
|
-
end
|
|
41
|
-
end
|
|
42
|
-
end
|
|
@@ -1,52 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/code/sql/statement'
|
|
23
|
-
require 'ronin/code/sql/set_clause'
|
|
24
|
-
require 'ronin/code/sql/where_clause'
|
|
25
|
-
|
|
26
|
-
module Ronin
|
|
27
|
-
module Code
|
|
28
|
-
module SQL
|
|
29
|
-
class Update < Statement
|
|
30
|
-
|
|
31
|
-
clause :set, SetClause
|
|
32
|
-
clause :where, WhereClause
|
|
33
|
-
|
|
34
|
-
def initialize(dialect,table=nil,options={},&block)
|
|
35
|
-
@table = table
|
|
36
|
-
|
|
37
|
-
super(dialect,options,&block)
|
|
38
|
-
end
|
|
39
|
-
|
|
40
|
-
def table(name=nil)
|
|
41
|
-
@table = name if name
|
|
42
|
-
return @table
|
|
43
|
-
end
|
|
44
|
-
|
|
45
|
-
def emit
|
|
46
|
-
emit_token('UPDATE') + emit_value(@table) + super
|
|
47
|
-
end
|
|
48
|
-
|
|
49
|
-
end
|
|
50
|
-
end
|
|
51
|
-
end
|
|
52
|
-
end
|
|
@@ -1,46 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/code/sql/clause'
|
|
23
|
-
|
|
24
|
-
module Ronin
|
|
25
|
-
module Code
|
|
26
|
-
module SQL
|
|
27
|
-
class ValuesClause < Clause
|
|
28
|
-
|
|
29
|
-
# Values of the clause
|
|
30
|
-
attr_accessor :values
|
|
31
|
-
|
|
32
|
-
#
|
|
33
|
-
# Creates a new ValuesClause object with the specified _values_.
|
|
34
|
-
#
|
|
35
|
-
def initialize(*values)
|
|
36
|
-
@values = values
|
|
37
|
-
end
|
|
38
|
-
|
|
39
|
-
def emit
|
|
40
|
-
emit_token('VALUES') + emit_row(@values)
|
|
41
|
-
end
|
|
42
|
-
|
|
43
|
-
end
|
|
44
|
-
end
|
|
45
|
-
end
|
|
46
|
-
end
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/code/sql/clause'
|
|
23
|
-
|
|
24
|
-
module Ronin
|
|
25
|
-
module Code
|
|
26
|
-
module SQL
|
|
27
|
-
class WhereClause < Clause
|
|
28
|
-
|
|
29
|
-
attr_accessor :expr
|
|
30
|
-
|
|
31
|
-
def initialize(expr)
|
|
32
|
-
@expr = expr
|
|
33
|
-
end
|
|
34
|
-
|
|
35
|
-
def emit
|
|
36
|
-
emit_token('WHERE') + emit_value(@expr)
|
|
37
|
-
end
|
|
38
|
-
|
|
39
|
-
end
|
|
40
|
-
end
|
|
41
|
-
end
|
|
42
|
-
end
|
data/lib/ronin/sql/error.rb
DELETED
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/sql/error/message'
|
|
23
|
-
require 'ronin/sql/error/pattern'
|
|
24
|
-
require 'ronin/sql/error/error'
|
|
25
|
-
require 'ronin/sql/error/patterns'
|
|
26
|
-
require 'ronin/sql/error/extensions'
|
|
@@ -1,62 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/sql/error/pattern'
|
|
23
|
-
|
|
24
|
-
module Ronin
|
|
25
|
-
module SQL
|
|
26
|
-
module Error
|
|
27
|
-
#
|
|
28
|
-
# Returns all defined SQL Pattern objects.
|
|
29
|
-
#
|
|
30
|
-
def Error.patterns
|
|
31
|
-
@@ronin_sql_error_patterns ||= {}
|
|
32
|
-
end
|
|
33
|
-
|
|
34
|
-
#
|
|
35
|
-
# Defines a new SQL Pattern object with the given _options_.
|
|
36
|
-
#
|
|
37
|
-
def Error.pattern(name,&block)
|
|
38
|
-
pattern = (Error.patterns[name] ||= Pattern.new(name))
|
|
39
|
-
|
|
40
|
-
block.call(pattern) if block
|
|
41
|
-
return pattern
|
|
42
|
-
end
|
|
43
|
-
|
|
44
|
-
#
|
|
45
|
-
# Returns the SQL Pattern objects with the specified _names_.
|
|
46
|
-
#
|
|
47
|
-
def Error.patterns_for(*names)
|
|
48
|
-
names.map { |name| Error.patterns[name] }.compact
|
|
49
|
-
end
|
|
50
|
-
|
|
51
|
-
#
|
|
52
|
-
# Returns the SQL Pattern objects for the dialect with the
|
|
53
|
-
# specified _name_.
|
|
54
|
-
#
|
|
55
|
-
def Error.patterns_for_dialect(name)
|
|
56
|
-
Error.patterns.values.select do |pattern|
|
|
57
|
-
pattern.dialect == name
|
|
58
|
-
end
|
|
59
|
-
end
|
|
60
|
-
end
|
|
61
|
-
end
|
|
62
|
-
end
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/sql/error/extensions/string'
|
|
@@ -1,77 +0,0 @@
|
|
|
1
|
-
#
|
|
2
|
-
# Ronin SQL - A Ronin library providing support for SQL related security
|
|
3
|
-
# tasks.
|
|
4
|
-
#
|
|
5
|
-
# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
|
|
6
|
-
#
|
|
7
|
-
# This program is free software; you can redistribute it and/or modify
|
|
8
|
-
# it under the terms of the GNU General Public License as published by
|
|
9
|
-
# the Free Software Foundation; either version 2 of the License, or
|
|
10
|
-
# (at your option) any later version.
|
|
11
|
-
#
|
|
12
|
-
# This program is distributed in the hope that it will be useful,
|
|
13
|
-
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
14
|
-
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
15
|
-
# GNU General Public License for more details.
|
|
16
|
-
#
|
|
17
|
-
# You should have received a copy of the GNU General Public License
|
|
18
|
-
# along with this program; if not, write to the Free Software
|
|
19
|
-
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
20
|
-
#
|
|
21
|
-
|
|
22
|
-
require 'ronin/sql/error/error'
|
|
23
|
-
|
|
24
|
-
class String
|
|
25
|
-
|
|
26
|
-
#
|
|
27
|
-
# Returns an SQL error Message using the given _options_ if the
|
|
28
|
-
# String contains a SQL error Pattern. If no SQL error Pattern can be
|
|
29
|
-
# found within the String, +nil+ will be returned.
|
|
30
|
-
#
|
|
31
|
-
# _options_ may contain the following keys:
|
|
32
|
-
# <tt>:dialect</tt>:: The SQL dialect whos error messages to test for.
|
|
33
|
-
# <tt>:types</tt>:: A list of error pattern types to test for.
|
|
34
|
-
#
|
|
35
|
-
def sql_error(options={})
|
|
36
|
-
if options[:dialect]
|
|
37
|
-
patterns = Ronin::SQL::Error.patterns_for_dialect(options[:dialect])
|
|
38
|
-
elsif options[:types]
|
|
39
|
-
patterns = Ronin::SQL::Error.patterns_for(*options[:types])
|
|
40
|
-
else
|
|
41
|
-
patterns = Ronin::SQL::Error.patterns.values
|
|
42
|
-
end
|
|
43
|
-
|
|
44
|
-
patterns.each do |pattern|
|
|
45
|
-
if (message = pattern.match(self))
|
|
46
|
-
return message
|
|
47
|
-
end
|
|
48
|
-
end
|
|
49
|
-
|
|
50
|
-
return nil
|
|
51
|
-
end
|
|
52
|
-
|
|
53
|
-
#
|
|
54
|
-
# Returns +true+ if a SQL error Pattern can be found within the
|
|
55
|
-
# String using the given _options_, returns +false+ otherwise.
|
|
56
|
-
#
|
|
57
|
-
# _options_ may contain the following keys:
|
|
58
|
-
# <tt>:dialect</tt>:: The SQL dialect whos error messages to test for.
|
|
59
|
-
# <tt>:types</tt>:: A list of error pattern types to test for.
|
|
60
|
-
#
|
|
61
|
-
def sql_error?(options={})
|
|
62
|
-
if options[:dialect]
|
|
63
|
-
patterns = Ronin::SQL::Error.patterns_for_dialect(options[:dialect])
|
|
64
|
-
elsif options[:types]
|
|
65
|
-
patterns = Ronin::SQL::Error.patterns_for(*options[:types])
|
|
66
|
-
else
|
|
67
|
-
patterns = Ronin::SQL::Error.patterns.values
|
|
68
|
-
end
|
|
69
|
-
|
|
70
|
-
patterns.each do |pattern|
|
|
71
|
-
return true if pattern =~ self
|
|
72
|
-
end
|
|
73
|
-
|
|
74
|
-
return false
|
|
75
|
-
end
|
|
76
|
-
|
|
77
|
-
end
|