bonus
/
Bonus-Cloud-JYY-Smart-Canteen
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

防止sql注入%

This commit is contained in:
sxu 2025-07-10 11:05:26 +08:00
parent 35ba4ea213
commit 982d7840d8
3 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bonus-modules/bonus-smart-canteen/src/main/java/com/bonus/canteen/core/kitchen/controller/KitchenSettingController.java
View File

@ -35,7 +35,7 @@ public class KitchenSettingController extends BaseController {
@ApiOperation(value = "查询功能参数配置列表")
//@RequiresPermissions("kitchen:setting:list")
@GetMapping("/list")
public TableDataInfo list(@Valid KitchenSetting kitchenSetting) {
public TableDataInfo list(KitchenSetting kitchenSetting) {
startPage();
List<KitchenSetting> list = kitchenSettingService.selectKitchenSettingList(kitchenSetting);
return getDataTable(list);

1
bonus-modules/bonus-smart-canteen/src/main/java/com/bonus/canteen/core/kitchen/domain/KitchenSetting.java
View File

@ -26,7 +26,6 @@ public class KitchenSetting extends BaseEntity {
/** 参数键名 */
@Excel(name = "参数键名")
@ApiModelProperty(value = "参数键名")
@NoPercent
private String itemName;
/** 参数主键 */

2
bonus-modules/bonus-smart-canteen/src/main/resources/mapper/kitchen/KitchenSettingMapper.xml
View File

@ -23,7 +23,7 @@ PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
<select id="selectKitchenSettingList" parameterType="com.bonus.canteen.core.kitchen.domain.KitchenSetting" resultMap="KitchenSettingResult">
<include refid="selectKitchenSettingVo"/>
<where>
<if test="itemName != null and itemName != ''"> and item_name like concat('%', #{itemName}, '%')</if>
<if test="itemName != null and itemName != ''"> and item_name = #{itemName}</if>
<if test="itemValue != null and itemValue != ''"> and item_value = #{itemValue}</if>
<if test="itemDescription != null and itemDescription != ''"> and item_description like concat('%', #{itemDescription}, '%')</if>
</where>