java——小项目（数据库）

package jdbc1.src;

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;

public class Test {
   
	
	public static boolean update(String sql,Object ...params) {
   
		try {
   
			Class.forName("com.mysql.jdbc.Driver");
			String url="jdbc:mysql://127.0.0.1:3306/test";
			Connection connection=DriverManager.getConnection(url,"root","root");
			PreparedStatement prepareStatement=connection.prepareStatement(sql);
			for (int i = 0; i < params.length; i++) {
   
				prepareStatement.setObject(i+1, params[i]);
			}
			return prepareStatement.executeUpdate()>0;
		} catch (Exception e) {
   
			e.printStackTrace();
		}
		return false;
	}

	public static void main(String[] args) {
   
		String sql="delete from user_info where id=?";
		String where="1' or '1'='1";
		if(update(sql,where)) {
   
			System.out.println("Yes");
		}else{
   
			System.out.println("No");
		}
	}
}

# DEBUG\u8BBE\u7F6E\u8F93\u51FA\u65E5\u5FD7\u7EA7\u522B\uFF0C\u7531\u4E8E\u4E3ADEBUG\uFF0C\u6240\u4EE5ERROR\u3001WARN\u548CINFO \u7EA7\u522B\u65E5\u5FD7\u4FE1\u606F\u4E5F\u4F1A\u663E\u793A\u51FA\u6765
log4j.rootLogger=DEBUG,Console,RollingFile

#\u5C06\u65E5\u5FD7\u4FE1\u606F\u8F93\u51FA\u5230\u63A7\u5236\u53F0
log4j.appender.Console=org.apache.log4j.ConsoleAppender
log4j.appender.Console.layout=org.apache.log4j.PatternLayout
log4j.appender.Console.layout.ConversionPattern= [%-5p]-[%d{
   yyyy-MM-dd HH:mm:ss}] -%l -%m%n
#\u5C06\u65E5\u5FD7\u4FE1\u606F\u8F93\u51FA\u5230\u64CD\u4F5C\u7CFB\u7EDFD\u76D8\u6839\u76EE\u5F55\u4E0B\u7684log.log\u6587\u4EF6\u4E2D
log4j.appender.RollingFile=org.apache.log4j.DailyRollingFileAppender
log4j.appender.RollingFile.File=C://logger//logger.log
log4j.appender.RollingFile.layout=org.apache.log4j.PatternLayout
log4j.appender.RollingFile.layout.ConversionPattern=%d [%t] %-5p %-40.40c %X{
   traceId}-%m%n

db.username=root
db.password=root
db.url=jdbc:mysql://127.0.0.1:3306/test

package com.jd.tool;

import java.io.IOException;
import java.io.InputStream;
import java.util.Properties;

public class PropertiesTool {
   

	  private static Properties properties = new Properties();
	  
	  static {
   
	    InputStream inputStream = PropertiesTool.class.getClassLoader().getResourceAsStream("db.properties");
	    try {