tool/lxutils
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

过滤关键字

Browse Source
This commit is contained in:
wangning 2025-08-23 09:18:40 +08:00
parent 718276c410
commit 3b4e5e7833
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lxDb/sql.go
View File

@ -552,6 +552,9 @@ func isSafeSQL(sql string) bool {
"CAST(", "CONVERT(", "IF(", "CASE", "WHEN", "THEN", "END", "CAST(", "CONVERT(", "IF(", "CASE", "WHEN", "THEN", "END",
} }
upperSQL = strings.ReplaceAll(upperSQL, "CREATED_AT", "")
upperSQL = strings.ReplaceAll(upperSQL, "UPDATED_AT", "")
// 检查危险关键字 // 检查危险关键字
for _, keyword := range dangerousKeywords { for _, keyword := range dangerousKeywords {
if strings.Contains(upperSQL, keyword) { if strings.Contains(upperSQL, keyword) {