(self, expression, comment=None, suffix=None, where=None)
return re.sub(r"(?s);\W*;", ";", expression)
This method appends the DBMS comment to the
        SQL injection request
This method appends the DBMS comment to the
        SQL injection request
This method appends the DBMS comment to the SQL injection request
def suffixQuery(self, expression, comment=None, suffix=None, where=None):
        """
        This method appends the DBMS comment to the
        SQL injection request
        """

        if conf.direct:
            return self.payloadDirect(expression)

        if expression is None:
            return None

        expression = self.cleanupPayload(expression)

        # Take default values if None
        suffix = kb.injection.suffix if kb.injection and suffix is None else suffix

        if kb.technique and kb.technique in kb.injection.data:
            where = kb.injection.data[kb.technique].where if where is None else where
            comment = kb.injection.data[kb.technique].comment if comment is None else comment

        if Backend.getIdentifiedDbms() == DBMS.ACCESS and comment == GENERIC_SQL_COMMENT:
            comment = queries[DBMS.ACCESS].comment.query

        if comment is not None:
            expression += comment

        # If we are replacing (<where>) the parameter original value with
        # our payload do not append the suffix
        if where == PAYLOAD.WHERE.REPLACE and not conf.suffix:
            pass

        elif suffix and not comment:
            expression += suffix.replace('\\', BOUNDARY_BACKSLASH_MARKER)

        return re.sub(r"(?s);\W*;", ";", expression)
def suffixQuery ( self , expression , comment = None , suffix = None , where = None ) : if conf . direct : return self . payloadDirect ( expression ) if expression is None : return None expression = self . cleanupPayload ( expression ) # Take default values if None suffix = kb . injection . suffix if kb . injection and suffix is None else suffix if kb . technique and kb . technique in kb . injection . data : where = kb . injection . data [ kb . technique ] . where if where is None else where comment = kb . injection . data [ kb . technique ] . comment if comment is None else comment if Backend . getIdentifiedDbms ( ) == DBMS . ACCESS and comment == GENERIC_SQL_COMMENT : comment = queries [ DBMS . ACCESS ] . comment . query if comment is not None : expression += comment # If we are replacing (<where>) the parameter original value with # our payload do not append the suffix if where == PAYLOAD . WHERE . REPLACE and not conf . suffix : pass elif suffix and not comment : expression += suffix . replace ( '\\' , BOUNDARY_BACKSLASH_MARKER ) return re . sub ( r"(?s);\W*;" , ";" , expression )