@@ -271,23 +271,26 @@ def checkSqlInjection(place, parameter, value):
271271 logger .debug (debugMsg )
272272 continue
273273
274- if kb .dbmsFilter and not intersect (payloadDbms , kb .dbmsFilter , True ):
274+ elif kb .dbmsFilter and not intersect (payloadDbms , kb .dbmsFilter , True ):
275275 debugMsg = "skipping test '%s' because " % title
276276 debugMsg += "its declared DBMS is different than provided"
277277 logger .debug (debugMsg )
278278 continue
279279
280+ elif kb .reduceTests == False :
281+ pass
282+
280283 # Skip DBMS-specific test if it does not match the
281284 # previously identified DBMS (via DBMS-specific payload)
282- if injection .dbms and not intersect (payloadDbms , injection .dbms , True ):
285+ elif injection .dbms and not intersect (payloadDbms , injection .dbms , True ):
283286 debugMsg = "skipping test '%s' because " % title
284287 debugMsg += "its declared DBMS is different than identified"
285288 logger .debug (debugMsg )
286289 continue
287290
288291 # Skip DBMS-specific test if it does not match the
289292 # previously identified DBMS (via DBMS-specific error message)
290- if kb .reduceTests and not intersect (payloadDbms , kb .reduceTests , True ):
293+ elif kb .reduceTests and not intersect (payloadDbms , kb .reduceTests , True ):
291294 debugMsg = "skipping test '%s' because the heuristic " % title
292295 debugMsg += "tests showed that the back-end DBMS "
293296 debugMsg += "could be '%s'" % unArrayizeValue (kb .reduceTests )
0 commit comments