tool/lxutils
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix: 去掉case when等的限制

Browse Source
This commit is contained in:
wangjie 2025-08-25 11:26:28 +08:00
parent 187f2a3016
commit a6fe11532b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lxDb/sql.go
View File

@ -533,7 +533,7 @@ func isSafeSQL(sql string) bool {
"ORDER BY", "LIMIT", "OFFSET", "--", "/*", "*/", ";", "@@", "@", "ORDER BY", "LIMIT", "OFFSET", "--", "/*", "*/", ";", "@@", "@",
"0X", "CHAR(", "ASCII(", "SUBSTRING(", "MID(", "LENGTH(", "LEN(", "0X", "CHAR(", "ASCII(", "SUBSTRING(", "MID(", "LENGTH(", "LEN(",
"CONCAT(", "LOAD_FILE(", "BENCHMARK(", "SLEEP(", "WAITFOR", "CONCAT(", "LOAD_FILE(", "BENCHMARK(", "SLEEP(", "WAITFOR",
"CAST(", "CONVERT(", "IF(", "CASE", "WHEN", "THEN", "END", "CAST(", "CONVERT(", "IF(",
} }
upperSQL = strings.ReplaceAll(upperSQL, "CREATED_AT", "") upperSQL = strings.ReplaceAll(upperSQL, "CREATED_AT", "")