|
|
@@ -0,0 +1,110 @@
|
|
|
+/**
|
|
|
+ * Copyright (c) 2018-2028, Chill Zhuang 庄骞 (smallchill@163.com).
|
|
|
+ * <p>
|
|
|
+ * Licensed under the GNU LESSER GENERAL PUBLIC LICENSE 3.0;
|
|
|
+ * you may not use this file except in compliance with the License.
|
|
|
+ * You may obtain a copy of the License at
|
|
|
+ * <p>
|
|
|
+ * http://www.gnu.org/licenses/lgpl.html
|
|
|
+ * <p>
|
|
|
+ * Unless required by applicable law or agreed to in writing, software
|
|
|
+ * distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
+ * See the License for the specific language governing permissions and
|
|
|
+ * limitations under the License.
|
|
|
+ */
|
|
|
+package org.springblade.core.mp.support;
|
|
|
+
|
|
|
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
|
|
|
+import org.springblade.core.tool.utils.Func;
|
|
|
+import org.springblade.core.tool.utils.StringPool;
|
|
|
+import org.springblade.core.tool.utils.StringUtil;
|
|
|
+
|
|
|
+import java.util.Map;
|
|
|
+
|
|
|
+/**
|
|
|
+ * 定义常用的 sql关键字
|
|
|
+ *
|
|
|
+ * @author Chill
|
|
|
+ */
|
|
|
+public class SqlKeyword {
|
|
|
+ private final static String SQL_REGEX = "'|%|--|insert|delete|update|select|count|group|union|create|drop|truncate|alter|grant|execute|exec|xp_cmdshell|call|declare|sql";
|
|
|
+
|
|
|
+ private static final String EQUAL = "_equal";
|
|
|
+ private static final String NOT_EQUAL = "_notequal";
|
|
|
+ private static final String LIKE = "_like";
|
|
|
+ private static final String NOT_LIKE = "_notlike";
|
|
|
+ private static final String GT = "_gt";
|
|
|
+ private static final String LT = "_lt";
|
|
|
+ private static final String DATE_GT = "_dategt";
|
|
|
+ private static final String DATE_EQUAL = "_dateequal";
|
|
|
+ private static final String DATE_LT = "_datelt";
|
|
|
+ private static final String IS_NULL = "_null";
|
|
|
+ private static final String NOT_NULL = "_notnull";
|
|
|
+ private static final String IGNORE = "_ignore";
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 条件构造器
|
|
|
+ *
|
|
|
+ * @param query 查询字段
|
|
|
+ * @param qw 查询包装类
|
|
|
+ */
|
|
|
+ public static void buildCondition(Map<String, Object> query, QueryWrapper<?> qw) {
|
|
|
+ if (Func.isEmpty(query)) {
|
|
|
+ return;
|
|
|
+ }
|
|
|
+ query.forEach((k, v) -> {
|
|
|
+ if (Func.hasEmpty(k, v) || k.endsWith(IGNORE)) {
|
|
|
+ return;
|
|
|
+ }
|
|
|
+ if (k.endsWith(EQUAL)) {
|
|
|
+ qw.eq(getColumn(k, EQUAL), v);
|
|
|
+ } else if (k.endsWith(NOT_EQUAL)) {
|
|
|
+ qw.ne(getColumn(k, NOT_EQUAL), v);
|
|
|
+ } else if (k.endsWith(NOT_LIKE)) {
|
|
|
+ qw.notLike(getColumn(k, NOT_LIKE), v);
|
|
|
+ } else if (k.endsWith(GT)) {
|
|
|
+ qw.gt(getColumn(k, GT), v);
|
|
|
+ } else if (k.endsWith(LT)) {
|
|
|
+ qw.lt(getColumn(k, LT), v);
|
|
|
+ } else if (k.endsWith(DATE_GT)) {
|
|
|
+ qw.gt(getColumn(k, DATE_GT), v);
|
|
|
+ } else if (k.endsWith(DATE_EQUAL)) {
|
|
|
+ qw.eq(getColumn(k, DATE_EQUAL), v);
|
|
|
+ } else if (k.endsWith(DATE_LT)) {
|
|
|
+ qw.lt(getColumn(k, DATE_LT), v);
|
|
|
+ } else if (k.endsWith(IS_NULL)) {
|
|
|
+ qw.isNull(getColumn(k, IS_NULL));
|
|
|
+ } else if (k.endsWith(NOT_NULL)) {
|
|
|
+ qw.isNotNull(getColumn(k, NOT_NULL));
|
|
|
+ } else {
|
|
|
+ qw.like(getColumn(k, LIKE), v);
|
|
|
+ }
|
|
|
+ });
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取数据库字段
|
|
|
+ *
|
|
|
+ * @param column 字段名
|
|
|
+ * @param keyword 关键字
|
|
|
+ * @return
|
|
|
+ */
|
|
|
+ private static String getColumn(String column, String keyword) {
|
|
|
+ return StringUtil.humpToUnderline(StringUtil.removeSuffix(column, keyword));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 把SQL关键字替换为空字符串
|
|
|
+ *
|
|
|
+ * @param param 关键字
|
|
|
+ * @return string
|
|
|
+ */
|
|
|
+ public static String filter(String param) {
|
|
|
+ if (param == null) {
|
|
|
+ return null;
|
|
|
+ }
|
|
|
+ return param.replaceAll("(?i)" + SQL_REGEX, StringPool.EMPTY);
|
|
|
+ }
|
|
|
+
|
|
|
+}
|
smallchill