SQL注入过滤工具类-Java版

最新推荐文章于 2024-08-11 19:48:42 发布

Fantacy.

最新推荐文章于 2024-08-11 19:48:42 发布

阅读量2.2k

点赞数 2

分类专栏： ⦿ 开发技术

本文链接：https://blog.csdn.net/Little_Stars/article/details/89467719

版权

本文介绍了如何使用Java创建一个SQL注入过滤工具类，通过有效防止恶意输入，确保数据库操作的安全性。内容涵盖关键方法和过滤策略。

摘要由CSDN通过智能技术生成

import java.util.HashMap;
import java.util.Map;
import java.util.regex.Matcher;
import java.util.regex.Pattern;

import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class SqlInjectionTool {
	private static final Logger logger = LoggerFactory.getLogger(SqlInjectionTool.class);
	
	static final String[] char0  = new String[]{"'","/*","*/","--","|","<",">"," or "," xor "," and ",
												"&lt;","&gt;","&#34","&#349","%27"};
	static final String[] keys1  = new String[]{"delete","drop","create","select","truncate","update","insert",
												"alter","declare","xp_cmdshell","exec","execute"};
	static final String[] keys2  = new Str