1.sql注入过滤开启

王通
1 parent 068b7f39
Showing 1 changed file with 1 additions and 1 deletions
src/main/java/com/bsth/filter/SQLInjectFilter.java
@@ -33,7 +33,7 @@ public class SQLInjectFilter extends BaseFilter{
 	}
  
 	private static boolean isSqlInject(String injectStr) {
-		String injStr = "'|and|exec|create|insert|select|delete|update|count|*|%|chr|mid|master|truncate|drop|char|declare|;|or|-|+|,";
+		String injStr = "'|and|exec|create|insert|select|delete|update|count|*|%|chr|mid|master|truncate|drop|char|declare|or|+";
 		String injStrArr[] = injStr.split("\\|");
 		injectStr = injectStr.toLowerCase();
 		for (int i = 0; i < injStrArr.length; i++) {