QR/laws_chery_serve
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改sql注入

Browse Source
This commit is contained in:
梁琦涛
2024-09-24 18:25:26 +08:00
parent d9fb393cc9
commit 267106b23b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-modules/src/main/java/com/jero/modules/laws/documenttool/service/impl/DocumentSplitServiceImpl.java
+2 -2
View File
@@ -406,6 +406,8 @@ public class DocumentSplitServiceImpl implements IDocumentSplitService {
@Override @Override
public List<Map<String, Object>> queryDocumentSplitDetailByList(Map<String, Object> parameter) { public List<Map<String, Object>> queryDocumentSplitDetailByList(Map<String, Object> parameter) {
// 防止SQL注入
this.checkForSQLInjection(parameter);
// 查询全部字段列表 // 查询全部字段列表
List<LawsTag> fieldList = lawsCommonMapper.getFieldList(TableNameEnum.DOCUMENT_SPLIT.getTableName()); List<LawsTag> fieldList = lawsCommonMapper.getFieldList(TableNameEnum.DOCUMENT_SPLIT.getTableName());
// 列表展示字段 // 列表展示字段
@@ -1780,8 +1782,6 @@ public class DocumentSplitServiceImpl implements IDocumentSplitService {
} }
private String getSelectCondition(Map<String, Object> parameter, List<LawsTag> fieldListCondition) { private String getSelectCondition(Map<String, Object> parameter, List<LawsTag> fieldListCondition) {
// 防止SQL注入
this.checkForSQLInjection(parameter);
// 拼接查询条件 // 拼接查询条件
StringBuilder selectCondition = new StringBuilder("where del_flag = 0"); StringBuilder selectCondition = new StringBuilder("where del_flag = 0");
// 非动态查询条件 // 非动态查询条件