From ae3ca6829a5bae6088b6f6a005377f11fee03df8 Mon Sep 17 00:00:00 2001
From: 13693261870 <252740454@qq.com>
Date: 星期一, 31 十月 2022 17:17:37 +0800
Subject: [PATCH] 1
---
src/main/java/com/lf/server/helper/StringHelper.java | 28 ++++++++++++++++++++++++++--
1 files changed, 26 insertions(+), 2 deletions(-)
diff --git a/src/main/java/com/lf/server/helper/StringHelper.java b/src/main/java/com/lf/server/helper/StringHelper.java
index 69e73bd..b38ee98 100644
--- a/src/main/java/com/lf/server/helper/StringHelper.java
+++ b/src/main/java/com/lf/server/helper/StringHelper.java
@@ -64,6 +64,11 @@
public static Pattern datePattern = Pattern.compile("^((\\d{2}(([02468][048])|([13579][26]))[\\-\\/]((((0?[13578])|(1[02]))[\\-\\/]((0?[1-9])|([1-2][0-9])|(3[01])))|(((0?[469])|(11))[\\-\\/]((0?[1-9])|([1-2][0-9])|(30)))|(0?2[\\-\\/]((0?[1-9])|([1-2][0-9])))))|(\\d{2}(([02468][1235679])|([13579][01345789]))[\\-\\/]((((0?[13578])|(1[02]))[\\-\\/]((0?[1-9])|([1-2][0-9])|(3[01])))|(((0?[469])|(11))[\\-\\/]((0?[1-9])|([1-2][0-9])|(30)))|(0?2[\\-\\/]((0?[1-9])|(1[0-9])|(2[0-8]))))))(\\s(((0?[0-9])|([1-2][0-3]))\\:([0-5]?[0-9])((\\s)|(\\:([0-5]?[0-9])))))?$");
/**
+ * SQL姝ｅ垯
+ */
+ public static Pattern sqlPattern = Pattern.compile("|and|exec|execute|insert|select|delete|update|count|drop|\\*|%|chr|mid|master|truncate|char|declare|sitename|net user|xp_cmdshell|;|or|-|\\+|,|like");
+
+ /**
* 瀛楃涓茶浆涓烘棩鏈�
*/
public static Date parseDate(String str) {
@@ -111,8 +116,15 @@
/**
* 鑾峰彇 like 瀛楃涓�
*/
- public static String getLikeStr(String name) {
- return StringHelper.isEmpty(name) ? null : "%" + name.trim() + "%";
+ public static String getLikeStr(String str) {
+ return StringHelper.isEmpty(str) ? null : "%" + str.trim() + "%";
+ }
+
+ /**
+ * 鑾峰彇 like 瀛楃涓�-2
+ */
+ public static String getLikeStr2(String str) {
+ return StringHelper.isEmpty(str) ? "%" : "%" + str.trim() + "%";
}
/**
@@ -130,6 +142,18 @@
}
/**
+ * 鍒ゆ柇鍊兼槸鍚﹀瓨鍦⊿QL娉ㄥ叆
+ *
+ * @param str 瀛楃涓�
+ * @return 鏄�/鍚�
+ */
+ public static boolean isSqlInjection(String str) {
+ Matcher m = sqlPattern.matcher(str);
+
+ return m.matches();
+ }
+
+ /**
* 鏍￠獙瀵嗙爜鏄�/鍚﹀悎娉�
*
* @param pwd 瀵嗙爜
--
Gitblit v1.9.3