Sponsors
There are currently no sponsors. Become a sponsor today!

Community Patterns

-2

Parsing result of SQL Server version (SELECT @@VERSION)

Created·2023-02-15 21:12
Flavor·.NET 7.0 (C#)
Parses MS SQL Server version returned from executing SELECT @@version
Submitted by M Rivas
-2

SQL Injection

Created·2015-10-14 10:15
Flavor·ECMAScript (JavaScript)
SQL injection regEx pattern
Submitted by Darshan Patil
-2

SQL Comment

Created·2015-08-22 08:27
Flavor·ECMAScript (JavaScript)
no description available
Submitted by anonymous
0

non-sargable finder

Created·2023-05-07 11:40
Flavor·PCRE2 (PHP)
find non-sargable sql
Submitted by nick preston
0

Find SQL injection opportunities

Created·2023-01-24 00:45
Flavor·PCRE2 (PHP)
-
Submitted by anonymous
0

Extract CREATE TABLE statements from SQL dump file

Created·2022-12-08 17:50
Flavor·PCRE2 (PHP)
Usage: pcre2grep -M -e'^(CREATE TABLE*?;)' dump.sql > create-tables.sql
Submitted by Daniel J. Post
0

sql inj

Created·2022-11-26 23:38
Flavor·ECMAScript (JavaScript)
as
Submitted by anonymous
0

Find more than one word in SQL

Created·2022-11-16 17:05
Flavor·PCRE2 (PHP)
Finds instances of more than one word in SQL.
Submitted by Matthew Hiebing
0

SQL Query Scalar Field Names Extractor

Created·2022-09-01 13:04
Flavor·Java
SQL Query Scalar Field Names Extractor
Submitted by Dobri
0

SQL Processes Filter

Created·2022-07-20 14:37
Flavor·PCRE2 (PHP)
Pattern to detect certain SQL queries in the PROCESSLIST results.
Submitted by anonymous
0

flake8-sql False Positives

Created·2022-07-08 14:00
Updated·2022-07-08 14:07
Flavor·Python
An example false positive matching docstring for the regex used by flake8-sql (https://github.com/pgjones/flake8-sql).
Submitted by anonymous
0

Select LIMIT-OFFSET clause in SQL query

Created·2021-10-19 00:26
Flavor·ECMAScript (JavaScript)
Select the LIMIT/OFFSET clause of an SQL query
Submitted by Matthew Marcus
0

Json Starts With Keys

Created·2021-05-19 06:23
Flavor·PCRE2 (PHP)
Regex for checking if JSON starts with desired keys Useful for validating/filtering database entries when used in combination with SQL Like Example: Postgre: select * from table_name where column_json ~ '^\{[\s]\"(tab1|tab3|tab5)".'
Submitted by MUA
0

Convert list for use in SQL IN statement

Created·2021-05-13 09:06
Flavor·PCRE2 (PHP)
Just need to remove the last ,
Submitted by Ian1971
0

Find all commas that are not in parenthesis. Used in SQL_Pretty_Format()

Created·2021-01-28 00:50
Flavor·ECMAScript (JavaScript)
Find all commas that are not in parenthesis or square brackets.
Submitted by Ben
0

Add space after comma if it has letters on each side.

Created·2021-01-28 00:49
Flavor·PCRE (Legacy)
This is used in the SQL_Pretty_Formatter after the commas inside quotes, parenthesis, and brackets have been temporarily replaced with |.
Submitted by Ben
0

Regex Replace params SQL

Created·2020-12-14 09:23
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

SQL Query

Created·2020-12-02 01:13
Updated·2023-07-21 12:41
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

SQLA example

Created·2020-10-16 17:08
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

Choose column names from SQL string

Created·2020-04-29 08:51
Flavor·ECMAScript (JavaScript)
no description available
Submitted by anonymous
0

otra de sql con variables

Created·2020-04-08 13:23
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

SQL Index to migration call

Created·2020-03-31 09:12
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

EX: Regex for check has dangerours SQL

Created·2019-11-13 02:40
Flavor·PCRE (Legacy)
Check whether or not the SQL is dangerous!
Submitted by anonymous
0

sql default constraints

Created·2019-09-16 08:38
Flavor·PCRE (Legacy)
Search in sql script generated using SCA for the implicit constraint names and defining the name explicityly
Submitted by anonymous
0

sql default constraints

Created·2019-09-16 08:30
Flavor·PCRE (Legacy)
Search in sql script generated using SCA for the implicit constraint names and defining the name explicityly
Submitted by anonymous
0

Parse get_version output including SVN Keywords

Created·2019-08-30 20:27
Flavor·PCRE (Legacy)
Grabs all but last SVN keyword. Uses "," as delimiter (need to get rid of (Wed 26 Aug 2018) first) PL/SQL: Unit: ZIP_UTIL_PKG, type: PACKAGE BODY. Code Type: NATIVE. SVN: File date: $Date: 2019-08-26 10:28:11 -0500 $, Revision: $Revision: 18213 $, $Author: mark.s $.
Submitted by anonymous
0

gen unique sql

Created·2019-08-26 06:43
Flavor·Python
no description available
Submitted by anonymous
0

Farmaline - Wanted strings to SQL

Created·2019-08-14 09:47
Flavor·PCRE (Legacy)
Note to escape % characters beforehand.
Submitted by anonymous
0

insert sql grouped

Created·2019-07-25 12:08
Flavor·PCRE (Legacy)
Find all insert sql grouped by columns and values
Submitted by anonymous
0

insert sql grouped

Created·2019-07-24 09:19
Flavor·PCRE (Legacy)
Find all insert sql grouped by columns and values
Submitted by anonymous
0

SQL INSERT Columns only

Created·2019-06-27 13:17
Flavor·ECMAScript (JavaScript)
no description available
Submitted by anonymous
0

SQL Injection test

Created·2019-05-14 07:45
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

SQL - columns to MAX LEN

Created·2019-04-17 21:06
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

SQL Header

Created·2019-04-15 15:41
Flavor·ECMAScript (JavaScript)
no description available
Submitted by anonymous
0

SQL Regex

Created·2019-05-01 00:39
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

SQL Injection

Created·2019-03-14 21:45
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

Parse fields of SQL Dump

Created·2018-12-19 17:53
Flavor·Golang
no description available
Submitted by anonymous
0

Parse tables in SQL Dump

Created·2018-12-19 17:53
Flavor·Golang
no description available
Submitted by anonymous
0

Sql Parser

Created·2018-12-10 17:11
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

js sql Apply function and alias to parameter (first match)

Created·2018-12-04 08:11
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

js sql Find all occurences of parameter

Created·2018-11-22 07:01
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

js sql Group by parameter (second or more groupby)

Created·2018-11-22 06:59
Flavor·PCRE (Legacy)
Insert GROUP BY statement for parameter (if there is already another "GROUP BY")
Submitted by anonymous
0

js sql Group by parameter (first groupby)

Created·2018-11-22 04:25
Flavor·PCRE (Legacy)
Insert GROUP BY statement for a parameter (if no previous "GROUP BY" is present)
Submitted by anonymous
0

js sql Group by parameter (first groupby)

Created·2018-11-22 04:13
Flavor·PCRE (Legacy)
Insert GROUP BY statement for parameter (if there is no "GROUP BY" yet)
Submitted by anonymous
0

SQL Columns

Created·2018-11-14 07:00
Flavor·PCRE (Legacy)
Gibt alle Spaltennamen zurück
Submitted by anonymous
0

sql dapper isnull

Created·2018-10-03 10:49
Flavor·PCRE (Legacy)
no description available
Submitted by anonymous
0

Some sql beauty

Created·2018-09-05 13:10
Flavor·Python
no description available
Submitted by anonymous
0

MYSQL params

Created·2018-05-13 16:24
Flavor·PCRE (Legacy)
Obtains the SQL params
Submitted by anonymous
0

SQL TO FLOW

Created·2018-05-01 15:48
Flavor·PCRE (Legacy)
Convert SQL to FLOW
Submitted by anonymous
0

ModSecurity 942430

Created·2018-03-09 00:52
Flavor·PCRE (Legacy)
From https://raw.githubusercontent.com/SpiderLabs/owasp-modsecurity-crs/v3.0/master/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
Submitted by anonymous

Community Library Entry

0

Regular Expression
Created·2017-10-13 17:47
Flavor·PCRE (Legacy)

/
--\X*?,[\ ]*?$
/
g
Open regex in editor

Description

Find commented SQL code columns ending with comma

 ++ -- max(case when promo_temp.ph_bus_unt = 'ZZZ'
 ++ --          then promo_temp.ph_prom_dt
 ++ --     end) lst_prom_dt1,
  max(case when promo_temp.ph_bus_unt = 'CCC'
           then promo_temp.ph_prom_dt
      end) lst_prom_dt2,
 ++ -- max(case when promo_temp.ph_bus_unt = 'XXX'
 ++ --           and promo_temp.ph_chnl_cd = 'A'
 ++ --          then promo_temp.ph_prom_dt
 ++ --     end) lst_prom_dt3,
Submitted by anonymous