golang/hotime
4
0
Fork 1
Code Issues Pull Requests Releases 66 Wiki Activity

数据库where增加[##]操作

Browse Source
This commit is contained in:
hoteas 2022-05-27 15:00:44 +08:00
parent b638d8bd65
commit c8a9038efe
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
db/hotimedb.go
View File

@ -711,6 +711,9 @@ func (that *HoTimeDB) varCond(k string, v interface{}) (string, []interface{}) {
k = "`" + k + "`" k = "`" + k + "`"
} }
where += " " + k + "=" + ObjToStr(v) where += " " + k + "=" + ObjToStr(v)
case "[##]": //直接添加value到sql，需要考虑防注入，value比如："a>b"
where += " " + ObjToStr(v)
case "[#!]": case "[#!]":
k = strings.Replace(k, "[#!]", "", -1) k = strings.Replace(k, "[#!]", "", -1)
if !strings.Contains(k, ".") { if !strings.Contains(k, ".") {