hunk.code_window:     if casting:
           errMsg = "possible integer casting "
           errMsg += "detected (e.g. %s=(int)$_REQUEST('%s')) " % (parameter, parameter)
           errMsg += "at the back-end web application"
           logger.error(errMsg)
  
hunk.labels: keep keep replace keep keep keep keep
hunk.after_edit:         errMsg = "possible %scasting " % ("integer " if origValue.isdigit() else "")
  
hunk.file_path: lib/controller/checks.py
hunk.type: replace
file: #!/usr/bin/env python
  
  """
  Copyright (c) 2006-2012 sqlmap developers (http://sqlmap.org/)
  See the file 'doc/COPYING' for copying permission
  """
  
  from lib.core.enums import PRIORITY
  
  __priority__ = PRIORITY.LOW
  
  def tamper(payload, headers):
      """
      Replaces space character (' ') with a pound character ('#') followed by
      a new line ('\n')
  
      Example:
          * Input: 1 AND 9227=9227
          * Output: 1%23%0A9227=9227
  
      Requirement:
          * MSSQL
          * MySQL
  
      Notes:
          * Useful to bypass several web application firewalls
      """
  
      retVal = ""
  
      if payload:
          for i in xrange(len(payload)):
              if payload[i].isspace():
                  retVal += "%23%0A"
              elif payload[i] == '#' or payload[i:i+3] == '-- ':
                  retVal += payload[i:]
                  break
              else:
                  retVal += payload[i]
  
      return retVal, headers
  