sql注入问题

b03b44a3 · sgjj · 7170fece · b03b44a3
Commit b03b44a3 authored Jun 28, 2020 by sgjj
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

MCmsAction.java src/main/java/net/mingsoft/cms/action/web/MCmsAction.java +3 -0

No files found.
--- a/src/main/java/net/mingsoft/cms/action/web/MCmsAction.java
+++ b/src/main/java/net/mingsoft/cms/action/web/MCmsAction.java
@@ -200,6 +200,9 @@ public class MCmsAction extends net.mingsoft.cms.action.BaseAction {
 				return;
 			}
 		}
+		if(sqlFilter(orderby)){
+			orderby = "id";
+		}
 		PageBean page = new PageBean();
 		//根据文章编号查询栏目详情模版
 		CategoryEntity column = (CategoryEntity) categoryBiz.getEntity(Integer.parseInt(article.getContentCategoryId()));