From 57c6bb0e139d8abf8cff098a2a4fb01e0826401b Mon Sep 17 00:00:00 2001 From: Postmodern Date: Mon, 26 Jun 2023 17:56:46 -0700 Subject: [PATCH] Add an example of using the new `comment:` keyword argument. --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 1b5e5af..32e91f4 100644 --- a/README.md +++ b/README.md @@ -177,6 +177,15 @@ puts sqli.to_sql(space: '/**/') # 1/**/UNION/**/SELECT/**/(1,2,3,4,id)/**/FROM/**/users ``` +Bypass filters using MySQL `#` comments: + +```ruby +sqli = Ronin::Code::SQLI.new +sqli.or { 1 == 1 } +puts sqli.to_sql(terminate: true, comment: '#') +# 1 OR 1=1 OR 1=1;# +``` + ## Requirements * [Ruby] >= 3.0.0