/** * Copyright (c) 2018-2028, Chill Zhuang 庄骞 (smallchill@163.com). *

* Licensed under the GNU LESSER GENERAL PUBLIC LICENSE 3.0; * you may not use this file except in compliance with the License. * You may obtain a copy of the License at *

* http://www.gnu.org/licenses/lgpl.html *

* Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.springblade.core.mp.support; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import org.springblade.core.tool.utils.Func; import org.springblade.core.tool.utils.StringPool; import org.springblade.core.tool.utils.StringUtil; import java.util.Map; /** * 定义常用的 sql关键字 * * @author Chill */ public class SqlKeyword { private final static String SQL_REGEX = "'|%|--|insert|delete|select|count|group|union|drop|truncate|alter|grant|execute|exec|xp_cmdshell|call|declare|sql"; private static final String EQUAL = "_equal"; private static final String NOT_EQUAL = "_notequal"; private static final String LIKE = "_like"; private static final String NOT_LIKE = "_notlike"; private static final String GT = "_gt"; private static final String LT = "_lt"; private static final String DATE_GT = "_dategt"; private static final String DATE_EQUAL = "_dateequal"; private static final String DATE_LT = "_datelt"; private static final String IS_NULL = "_null"; private static final String NOT_NULL = "_notnull"; private static final String IGNORE = "_ignore"; /** * 条件构造器 * * @param query 查询字段 * @param qw 查询包装类 */ public static void buildCondition(Map query, QueryWrapper qw) { if (Func.isEmpty(query)) { return; } query.forEach((k, v) -> { if (Func.hasEmpty(k, v) || k.endsWith(IGNORE)) { return; } if (k.endsWith(EQUAL)) { qw.eq(getColumn(k, EQUAL), v); } else if (k.endsWith(NOT_EQUAL)) { qw.ne(getColumn(k, NOT_EQUAL), v); } else if (k.endsWith(NOT_LIKE)) { qw.notLike(getColumn(k, NOT_LIKE), v); } else if (k.endsWith(GT)) { qw.gt(getColumn(k, GT), v); } else if (k.endsWith(LT)) { qw.lt(getColumn(k, LT), v); } else if (k.endsWith(DATE_GT)) { qw.gt(getColumn(k, DATE_GT), v); } else if (k.endsWith(DATE_EQUAL)) { qw.eq(getColumn(k, DATE_EQUAL), v); } else if (k.endsWith(DATE_LT)) { qw.lt(getColumn(k, DATE_LT), v); } else if (k.endsWith(IS_NULL)) { qw.isNull(getColumn(k, IS_NULL)); } else if (k.endsWith(NOT_NULL)) { qw.isNotNull(getColumn(k, NOT_NULL)); } else { qw.like(getColumn(k, LIKE), v); } }); } /** * 获取数据库字段 * * @param column 字段名 * @param keyword 关键字 * @return String */ private static String getColumn(String column, String keyword) { return StringUtil.humpToUnderline(StringUtil.removeSuffix(column, keyword)); } /** * 把SQL关键字替换为空字符串 * * @param param 关键字 * @return string */ public static String filter(String param) { if (param == null) { return null; } return param.replaceAll("(?i)" + SQL_REGEX, StringPool.EMPTY); } }