From 80f9d76904c5d28c77a4d9bbaca9daa328e7806c Mon Sep 17 00:00:00 2001
From: wuxw <928255095@qq.com>
Date: 星期二, 07 五月 2019 00:26:57 +0800
Subject: [PATCH] web 服务 修改docker内容
---
java110-common/src/main/java/com/java110/common/util/CommonUtil.java | 18 ++++++++++++++++++
1 files changed, 18 insertions(+), 0 deletions(-)
diff --git a/java110-common/src/main/java/com/java110/common/util/CommonUtil.java b/java110-common/src/main/java/com/java110/common/util/CommonUtil.java
index 01506c7..4329513 100644
--- a/java110-common/src/main/java/com/java110/common/util/CommonUtil.java
+++ b/java110-common/src/main/java/com/java110/common/util/CommonUtil.java
@@ -59,4 +59,22 @@
return result;
}
+
+
+ //鏁堥獙
+ public static boolean sqlValidate(String str) {
+ str = str.toLowerCase();//缁熶竴杞负灏忓啓
+ String badStr = "'|and|exec|execute|insert|select|delete|update|count|drop|*|%|chr|mid|master|truncate|" +
+ "char|declare|sitename|net user|xp_cmdshell|;|or|-|+|,|like'|and|exec|execute|insert|create|drop|" +
+ "table|from|grant|use|group_concat|column_name|" +
+ "information_schema.columns|table_schema|union|where|select|delete|update|order|by|count|*|" +
+ "chr|mid|master|truncate|char|declare|or|;|-|--|+|,|like|//|/|%|#";//杩囨护鎺夌殑sql鍏抽敭瀛楋紝鍙互鎵嬪姩娣诲姞
+ String[] badStrs = badStr.split("\\|");
+ for (int i = 0; i < badStrs.length; i++) {
+ if (str.indexOf(badStrs[i]) >= 0) {
+ return true;
+ }
+ }
+ return false;
+ }
}
--
Gitblit v1.8.0