Skip to content

C
cms_sys
Commit b03b44a3 authored by sgjj's avatar sgjj
Browse files
Options

sql注入问题

parent 7170fece
Show whitespace changes
Inline Side-by-side
Showing with 3 additions and 0 deletions
src/main/java/net/mingsoft/cms/action/web/MCmsAction.java
View file @ b03b44a3
...@@ -200,6 +200,9 @@ public class MCmsAction extends net.mingsoft.cms.action.BaseAction { ...@@ -200,6 +200,9 @@ public class MCmsAction extends net.mingsoft.cms.action.BaseAction {
return; return;
} }
} }
if(sqlFilter(orderby)){
orderby = "id";
}
PageBean page = new PageBean(); PageBean page = new PageBean();
//根据文章编号查询栏目详情模版 //根据文章编号查询栏目详情模版
CategoryEntity column = (CategoryEntity) categoryBiz.getEntity(Integer.parseInt(article.getContentCategoryId())); CategoryEntity column = (CategoryEntity) categoryBiz.getEntity(Integer.parseInt(article.getContentCategoryId()));
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment