Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

like '%'||?||'%' 类型SQL解析错误 #1663

Closed
stxpons opened this issue Mar 29, 2017 · 1 comment
Closed

like '%'||?||'%' 类型SQL解析错误 #1663

stxpons opened this issue Mar 29, 2017 · 1 comment
Labels
Milestone

Comments

@stxpons
Copy link

stxpons commented Mar 29, 2017

Druid版本:1.0.28、1.0.29、1.0.27都有这个问题

Caused by: java.sql.SQLException: sql injection violation, syntax error: ERROR. token : QUESBAR, pos : 112 : select count(brand0_.bid) as col_0_0_ from qm_brand brand0_ where brand0_.cmid=? and (brand0_.bname like '%'||?||'%')
at com.alibaba.druid.wall.WallFilter.check(WallFilter.java:725)
......

Caused by: com.alibaba.druid.sql.parser.ParserException: ERROR. token : QUESBAR, pos : 112
at com.alibaba.druid.sql.parser.SQLExprParser.primary(SQLExprParser.java:600)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleExprParser.primary(OracleExprParser.java:465)
at com.alibaba.druid.sql.parser.SQLExprParser.bitXor(SQLExprParser.java:111)
at com.alibaba.druid.sql.parser.SQLExprParser.multiplicative(SQLExprParser.java:163)
at com.alibaba.druid.sql.parser.SQLExprParser.additiveRest(SQLExprParser.java:1356)
at com.alibaba.druid.sql.parser.SQLExprParser.additive(SQLExprParser.java:1344)
at com.alibaba.druid.sql.parser.SQLExprParser.shift(SQLExprParser.java:1371)
at com.alibaba.druid.sql.parser.SQLExprParser.bitAnd(SQLExprParser.java:1249)
at com.alibaba.druid.sql.parser.SQLExprParser.bitOr(SQLExprParser.java:1263)
at com.alibaba.druid.sql.parser.SQLExprParser.relationalRest(SQLExprParser.java:1525)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleExprParser.relationalRest(OracleExprParser.java:973)
at com.alibaba.druid.sql.parser.SQLExprParser.exprRest(SQLExprParser.java:102)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleExprParser.exprRest(OracleExprParser.java:1103)
at com.alibaba.druid.sql.parser.SQLExprParser.expr(SQLExprParser.java:91)
at com.alibaba.druid.sql.parser.SQLExprParser.primary(SQLExprParser.java:208)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleExprParser.primary(OracleExprParser.java:465)
at com.alibaba.druid.sql.parser.SQLExprParser.bitXor(SQLExprParser.java:111)
at com.alibaba.druid.sql.parser.SQLExprParser.multiplicative(SQLExprParser.java:163)
at com.alibaba.druid.sql.parser.SQLExprParser.additive(SQLExprParser.java:1343)
at com.alibaba.druid.sql.parser.SQLExprParser.shift(SQLExprParser.java:1371)
at com.alibaba.druid.sql.parser.SQLExprParser.bitAnd(SQLExprParser.java:1249)
at com.alibaba.druid.sql.parser.SQLExprParser.bitOr(SQLExprParser.java:1263)
at com.alibaba.druid.sql.parser.SQLExprParser.equality(SQLExprParser.java:1278)
at com.alibaba.druid.sql.parser.SQLExprParser.relational(SQLExprParser.java:1450)
at com.alibaba.druid.sql.parser.SQLExprParser.andRest(SQLExprParser.java:1408)
at com.alibaba.druid.sql.parser.SQLExprParser.exprRest(SQLExprParser.java:104)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleExprParser.exprRest(OracleExprParser.java:1103)
at com.alibaba.druid.sql.parser.SQLExprParser.expr(SQLExprParser.java:91)
at com.alibaba.druid.sql.parser.SQLSelectParser.expr(SQLSelectParser.java:540)
at com.alibaba.druid.sql.parser.SQLSelectParser.parseWhere(SQLSelectParser.java:260)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleSelectParser.query(OracleSelectParser.java:274)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleSelectParser.select(OracleSelectParser.java:81)
at com.alibaba.druid.sql.dialect.oracle.parser.OracleStatementParser.parseStatementList(OracleStatementParser.java:131)
at com.alibaba.druid.sql.parser.SQLStatementParser.parseStatementList(SQLStatementParser.java:79)
at com.alibaba.druid.wall.WallProvider.checkInternal(WallProvider.java:620)
at com.alibaba.druid.wall.WallProvider.check(WallProvider.java:574)
at com.alibaba.druid.wall.WallFilter.check(WallFilter.java:712)
... 104 common frames omitted

wenshao added a commit that referenced this issue Apr 5, 2017
@wenshao wenshao added the Bug label Apr 5, 2017
@wenshao wenshao added this to the 1.0.30 milestone Apr 5, 2017
@wenshao
Copy link
Member

wenshao commented May 14, 2017

已经支持,请使用新版本 https://github.com/alibaba/druid/releases/tag/1.0.30

@wenshao wenshao closed this as completed May 14, 2017
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants