fix:orderBy不拼接
This commit is contained in:
parent
a2eb8010d3
commit
977c301dc5
@ -2,6 +2,7 @@ package lxDb
|
||||
|
||||
import (
|
||||
"errors"
|
||||
"fmt"
|
||||
"git.listensoft.net/tool/lxutils/lxUtil"
|
||||
"gorm.io/gorm"
|
||||
"regexp"
|
||||
@ -283,11 +284,8 @@ func SqlQuery(tx *gorm.DB, sql string, list interface{}, q *PaginationQuery, par
|
||||
if !isSafeSQL(q.OrderBy) {
|
||||
return errors.New("环境异常")
|
||||
}
|
||||
safeOrderBy := sanitizeOrderBy(q.OrderBy)
|
||||
if safeOrderBy != "" {
|
||||
builder.WriteString(" ORDER BY ")
|
||||
builder.WriteString(safeOrderBy)
|
||||
}
|
||||
s := fmt.Sprintf(" ORDER BY %s", lxUtil.FieldToColumn(q.OrderBy)) // TODO: q.OrderBy是字符串,可能多个字段 会有问题吗
|
||||
builder.WriteString(s)
|
||||
}
|
||||
|
||||
// 安全地处理分页 - 使用参数化查询
|
||||
|
||||
Loading…
Reference in New Issue
Block a user