From 977c301dc526b7e06dc4c0517b958c529b9d0f5f Mon Sep 17 00:00:00 2001 From: wangning Date: Sat, 23 Aug 2025 14:18:10 +0800 Subject: [PATCH] =?UTF-8?q?fix:orderBy=E4=B8=8D=E6=8B=BC=E6=8E=A5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lxDb/sql.go | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/lxDb/sql.go b/lxDb/sql.go index e57e520..a6df73d 100644 --- a/lxDb/sql.go +++ b/lxDb/sql.go @@ -2,6 +2,7 @@ package lxDb import ( "errors" + "fmt" "git.listensoft.net/tool/lxutils/lxUtil" "gorm.io/gorm" "regexp" @@ -283,11 +284,8 @@ func SqlQuery(tx *gorm.DB, sql string, list interface{}, q *PaginationQuery, par if !isSafeSQL(q.OrderBy) { return errors.New("环境异常") } - safeOrderBy := sanitizeOrderBy(q.OrderBy) - if safeOrderBy != "" { - builder.WriteString(" ORDER BY ") - builder.WriteString(safeOrderBy) - } + s := fmt.Sprintf(" ORDER BY %s", lxUtil.FieldToColumn(q.OrderBy)) // TODO: q.OrderBy是字符串,可能多个字段 会有问题吗 + builder.WriteString(s) } // 安全地处理分页 - 使用参数化查询