多排序字段查询

package com.xmkgsy.mybatis;

import cn.hutool.core.util.StrUtil;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.core.metadata.OrderItem;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.fasterxml.jackson.annotation.JsonIgnore;
import io.swagger.annotations.ApiModel;
import io.swagger.annotations.ApiModelProperty;
import lombok.Data;

import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

/**
 * @Author: LJ
 * @Created: 2023/12/22 16:31
 */
@Data
@ApiModel("查询条件")
public class PageParams<T> {

    @ApiModelProperty(value = "查询参数", required = false)
    private T model;

    @ApiModelProperty(value = "页面大小", example = "10")
    private long size = 10;

    @ApiModelProperty(value = "当前页", example = "1")
    private long current = 1;

    @ApiModelProperty(value = "排序", example = "id")
    private String sort = "id";

    @ApiModelProperty(value = "排序规则, 默认descending", allowableValues = "descending,ascending", example = "descending")
    private String order = "descending";

    @ApiModelProperty("扩展参数")
    private Map<String, String> map = new HashMap<>(1);

    /**
     * 支持多个字段排序，用法：
     * eg.1, 参数：{order:"name,id", order:"descending,ascending" }。 排序： name desc, id asc
     * eg.2, 参数：{order:"name", order:"descending,ascending" }。 排序： name desc
     * eg.3, 参数：{order:"name,id", order:"descending" }。 排序： name desc
     *
     * @return
     */
    @JsonIgnore
    public IPage buildPage() {
        return buildPage(true, true);
    }

    @JsonIgnore
    public IPage buildCountPage() {
        return buildPage(true, true);
    }

    @JsonIgnore
    public IPage buildCountPage(boolean camel2Underline) {
        return buildPage(true, camel2Underline);
    }

    @JsonIgnore
    public IPage buildNotCountPage() {
        return buildPage(false, true);
    }

    @JsonIgnore
    public IPage buildNotCountPage(boolean camel2Underline) {
        return buildPage(false, camel2Underline);
    }

    @JsonIgnore
    private IPage buildPage(boolean isSearchCount, boolean camel2Underline) {
        PageParams params = this;
        //没有排序参数
        if (StrUtil.isEmpty(params.getSort())) {
            Page page = new Page(params.getCurrent(), params.getSize(), isSearchCount);
            return page;
        }

        Page page = new Page(params.getCurrent(), params.getSize(), isSearchCount);

        List<OrderItem> orders = new ArrayList<>();
        String[] sortArr = StrUtil.split(params.getSort(), ",");
        String[] orderArr = StrUtil.split(params.getOrder(), ",");

        int len = sortArr.length < orderArr.length ? sortArr.length : orderArr.length;
        for (int i = 0; i < len; i++) {
            String humpSort = sortArr[i];
            // 简单的 驼峰 转 下划线
            String underlineSort = camel2Underline ? StrUtil.toUnderlineCase(humpSort) : humpSort;

            // 除了 create_time 和 updateTime 都过滤sql关键字
            if (!StrUtil.equalsAny(humpSort, "create_time", "update_time")) {
                underlineSort = AntiSqlFilter.getSafeValue(underlineSort);
            }

            orders.add("ascending".equals(orderArr[i]) ? OrderItem.asc(underlineSort) : OrderItem.desc(underlineSort));
        }

        page.setOrders(orders);

        return page;
    }
}

package com.xmkgsy.mybatis;

import cn.hutool.core.util.ArrayUtil;

import java.util.HashMap;
import java.util.Map;

/**
 * @Author: LJ
 * @Created: 2023/12/22 16:37
 */
public class AntiSqlFilter {

    private static final String[] KEY_WORDS = {";", "\"", "\'", "/*", "*/", "--", "exec",
            "select", "update", "delete", "insert", "alter", "drop", "create", "shutdown"};

    public static Map<String, String[]> getSafeParameterMap(Map<String, String[]> parameterMap) {
        Map<String, String[]> map = new HashMap<>(parameterMap.size());
        for (String key : parameterMap.keySet()) {
            String[] oldValues = parameterMap.get(key);
            map.put(key, getSafeValues(oldValues));
        }
        return map;
    }

    public static String[] getSafeValues(String[] oldValues) {
        if (ArrayUtil.isNotEmpty(oldValues)) {
            String[] newValues = new String[oldValues.length];
            for (int i = 0; i < oldValues.length; i++) {
                newValues[i] = getSafeValue(oldValues[i]);
            }
            return newValues;
        }
        return null;
    }

    public static String getSafeValue(String oldValue) {
        if (oldValue == null || "".equals(oldValue)) {
            return oldValue;
        }
        StringBuilder sb = new StringBuilder(oldValue);
        String lowerCase = oldValue.toLowerCase();
        for (String keyWord : KEY_WORDS) {
            int x;
            while ((x = lowerCase.indexOf(keyWord)) >= 0) {
                if (keyWord.length() == 1) {
                    sb.replace(x, x + 1, " ");
                    lowerCase = sb.toString().toLowerCase();
                    continue;
                }
                sb.delete(x, x + keyWord.length());
                lowerCase = sb.toString().toLowerCase();
            }
        }
        return sb.toString();
    }
}