From 15375a1d0d07c61c132906ff8da45f67bcd711f6 Mon Sep 17 00:00:00 2001
From: 13693261870 <252740454@qq.com>
Date: 星期四, 17 十一月 2022 15:51:05 +0800
Subject: [PATCH] 1
---
src/main/java/com/lf/server/helper/StringHelper.java | 30 +++++++++++++++++++++++++++---
1 files changed, 27 insertions(+), 3 deletions(-)
diff --git a/src/main/java/com/lf/server/helper/StringHelper.java b/src/main/java/com/lf/server/helper/StringHelper.java
index 69e73bd..7f3e185 100644
--- a/src/main/java/com/lf/server/helper/StringHelper.java
+++ b/src/main/java/com/lf/server/helper/StringHelper.java
@@ -35,7 +35,7 @@
/**
* 鏍煎紡鍖栧綋鍓嶇郴缁熸棩鏈� 4
*/
- public static final SimpleDateFormat YMD_HM_FORMAT = new SimpleDateFormat("yyyyMMdd_HHmm");
+ public static final SimpleDateFormat YMDHMS2_FORMAT = new SimpleDateFormat("yyyyMMddHHmmss");
/**
* 鍒ゆ柇瀛楃涓�,鏄惁涓烘暣鏁�
@@ -62,6 +62,11 @@
* 鏃ユ湡姝ｅ垯
*/
public static Pattern datePattern = Pattern.compile("^((\\d{2}(([02468][048])|([13579][26]))[\\-\\/]((((0?[13578])|(1[02]))[\\-\\/]((0?[1-9])|([1-2][0-9])|(3[01])))|(((0?[469])|(11))[\\-\\/]((0?[1-9])|([1-2][0-9])|(30)))|(0?2[\\-\\/]((0?[1-9])|([1-2][0-9])))))|(\\d{2}(([02468][1235679])|([13579][01345789]))[\\-\\/]((((0?[13578])|(1[02]))[\\-\\/]((0?[1-9])|([1-2][0-9])|(3[01])))|(((0?[469])|(11))[\\-\\/]((0?[1-9])|([1-2][0-9])|(30)))|(0?2[\\-\\/]((0?[1-9])|(1[0-9])|(2[0-8]))))))(\\s(((0?[0-9])|([1-2][0-3]))\\:([0-5]?[0-9])((\\s)|(\\:([0-5]?[0-9])))))?$");
+
+ /**
+ * SQL姝ｅ垯
+ */
+ public static Pattern sqlPattern = Pattern.compile("|and|exec|execute|insert|select|delete|update|count|drop|\\*|%|chr|mid|master|truncate|char|declare|sitename|net user|xp_cmdshell|;|or|-|\\+|,|like");
/**
* 瀛楃涓茶浆涓烘棩鏈�
@@ -111,8 +116,15 @@
/**
* 鑾峰彇 like 瀛楃涓�
*/
- public static String getLikeStr(String name) {
- return StringHelper.isEmpty(name) ? null : "%" + name.trim() + "%";
+ public static String getLikeStr(String str) {
+ return StringHelper.isEmpty(str) ? null : "%" + str.trim() + "%";
+ }
+
+ /**
+ * 鑾峰彇 like 瀛楃涓�-2
+ */
+ public static String getLikeStr2(String str) {
+ return StringHelper.isEmpty(str) ? "%" : "%" + str.trim() + "%";
}
/**
@@ -130,6 +142,18 @@
}
/**
+ * 鍒ゆ柇鍊兼槸鍚﹀瓨鍦⊿QL娉ㄥ叆
+ *
+ * @param str 瀛楃涓�
+ * @return 鏄�/鍚�
+ */
+ public static boolean isSqlInjection(String str) {
+ Matcher m = sqlPattern.matcher(str);
+
+ return m.matches();
+ }
+
+ /**
* 鏍￠獙瀵嗙爜鏄�/鍚﹀悎娉�
*
* @param pwd 瀵嗙爜
--
Gitblit v1.9.3