sqlinjection.py 504 B

12345678910111213
  1. # a = {'OS_NO--': 'SO2003000001', 'PMC_DD': '2020-03-19', 'WH_REM': '123', 'ITM': 1}
  2. # print(a)
  3. class sqlinjections(object):
  4. # def __init__(self,result):
  5. # self.arguments = result
  6. def ifsql(self,arguments):
  7. for key,value in arguments.items():
  8. if str(value) .find("'") >= 0 or str(value) .find(" ") >= 0 or str(value) .find("--") >= 0:
  9. print(value)
  10. result = True
  11. return result
  12. result = False
  13. return result