ruoyi
/
RuoYi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java. 

Signed-off-by: yi-l-i-yi-li <8995991+yi-l-i-yi-li@user.noreply.gitee.com>
This commit is contained in:
yi-l-i-yi-li 2022-08-15 08:04:12 +00:00 committed by Gitee
parent 0f9558a825
commit f9da2e5b87
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java
View File

@ -12,8 +12,9 @@ public class SqlUtil
{ {
/** /**
* 定义常用的 sql关键字 * 定义常用的 sql关键字
* 删除管道符 "|"左边的空格，空格会导致sql注入
*/ */
public static String SQL_REGEX = "select |insert |delete |update |drop |count |exec |chr |mid |master |truncate |char |and |declare "; public static String SQL_REGEX = "select|insert|delete|update|drop|count|exec|chr|mid|master|truncate|char|and|declare";
/** /**
* 仅支持字母、数字、下划线、空格、逗号、小数点（支持多个字段排序） * 仅支持字母、数字、下划线、空格、逗号、小数点（支持多个字段排序）