Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wall过滤器误报SQL解析错误:ERROR. token : QUESBAR #1750

Closed
roc-cn opened this issue May 19, 2017 · 1 comment
Closed

Wall过滤器误报SQL解析错误:ERROR. token : QUESBAR #1750

roc-cn opened this issue May 19, 2017 · 1 comment
Milestone

Comments

@roc-cn
Copy link

roc-cn commented May 19, 2017

错误如下:

Caused by: java.sql.SQLException: sql injection violation, syntax error: ERROR. token : QUESBAR, pos : 173 :  SELECT TMP_PAGE.*, ROWNUM ROW_ID FROM ( SELECT M.*, A.*
		FROM T_EW_MERCHANT M LEFT JOIN LP_ADDRESS A
		ON
		M.ADDRESS_KEY = A.KEY
		 
			WHERE M.MERCHANT_CODE LIKE '%'||?||'%'
			OR
			M.MERCHANT_NAME LIKE '%'||?||'%'
			OR M.MERCHANT_NAME LIKE
			'%'||?||'%'
			OR M.CERTIFICATE LIKE
			'%'||?||'%'
			OR M.OWNER
			LIKE
			'%'||?||'%'
			OR A.COUNTRY LIKE
			'%'||?||'%'
			OR
			A.PROVINCE LIKE
			'%'||?||'%'
			OR A.CITY LIKE
			'%'||?||'%'
			OR A.COUNTY LIKE
			'%'||?||'%'
			OR A.STREET_AREA LIKE
			'%'||?||'%'
			OR A.DETAILE LIKE
			'%'||?||'%'
			OR A.ZIPCODE
			LIKE
			'%'||?||'%' ) TMP_PAGE WHERE ROWNUM <= 10

版本:

<dependency>
			<groupId>com.alibaba</groupId>
			<artifactId>druid</artifactId>
			<version>1.0.31</version>
		</dependency>
@wenshao wenshao added this to the 1.0.32 milestone May 31, 2017
@wenshao wenshao modified the milestones: 1.1.0, 1.0.32 Jun 25, 2017
@wenshao
Copy link
Member

wenshao commented Jun 25, 2017

已修复问题,请用新版本 https://github.com/alibaba/druid/releases/tag/1.1.0

@wenshao wenshao closed this as completed Jun 25, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants