prevent sql injection attack in dynamic query grails -

-

मेरे पास क्वेरी है: 

  def selectQuery = "select ins" def fromQuery = " InstituteStudent ins "def whereQuery =" जहां ins.institution =: inst "def compareQuery = [inst: inst]   
 और अन्य क्वेरी के रूप में:  
  यदि (params.p.Address! = "") {WhereQuery + = "और ins.address = '" + + पता + "' 'डीईफ़ चेक = इंस्टीट्यूशनट्यूडेंट। एक्सएक्यूट (" इन्स्टिट्यूशन इंस्टीट्यूशन्स से चयन करेंइंटरसइन्स्टेसशन =: इंस्ट एंड आईएस .address = '"+ पता +"' ", [inst: inst])}   
 अग्रिम खोज क्वेरी का परिणाम  
  def allQuery = selectQuery + FromQuery + whereQuery def finalQuery = InstitutionStudent.executeQuery (allQuery.toString (), तुलना करें)   
 लेकिन इंजेक्शन हमले की संभावना है ताकि इसे रोकने के लिए इस क्वेरी से पैरामीटरेटेड क्वेरी को कैसे पारित किया जाए?   
 
 
 आप सामान्य नामित पैरामीटर का उपयोग कर सकते हैं:  
  यदि (पैरामीटर PAddress! = "") {WhereQ Uery + = "और ins.address =: पता" compareQuery.address = address def चेक = इंस्टीट्यूशन छात्र। ExecuteQuery ("इंस्टीट्यूशनल इंस्टीट्यूशन इंस्टीट्यूट्स से इन्फोस इनस्टेक्शन =: inst और ins.address =: address", [inst: inst , पता: पता])}

Comments

Post a Comment

Popular posts from this blog

python - Writing Greek in matplotlib labels, titles -

-
Image
I'm trying to write some text for labels, shape titles etc. with my plots, but no benefit till now Has not happened . I do not want to print specific characters (I know how to use special characters), I want to write the entire text in Greek (maybe Unicode and text ' ?). , suggesting that I would like to mention that for some reason I can not get matplotlib to cooperate with Tex (using IPython notebook from Anaconda in Ubuntu 14.10) so that there really is an option Will not be the first. I tried loading the Arial font and it loads successfully but again I get square blocks instead of characters. I import matplotlib.font_manager FM PROP = FM Font Properties (fname = '/ usr / share / fonts / truetype / msttcorefonts / Arial.ttf') And then to display the string I u'Î? ? I ?? Î¿Ï ?? ÎμÎ »second ?? μΠ± i ?? I ± i ?? I ?? Used ο किया? ? Î¿Î¼Î¿Î¯Ï ?? I ?? I · I ?? ' . Ariel is considered to be fully presented to Greek and I have used it many times ...
Read more

c# - LINQ to Entities does not recognize the method 'Int32 IndexOf(System.String, System.StringComparison)' method -

-
I have performed a linq query using Entityframework as below GroupMaster getGroup = Null; GetGroup = DataContext.Groups.FirstOrDefault (item = & gt; keyword.IndexOf (item.Keywords, StringComparison.OrdinalIgnoreCase)> = 0 & amp; amp; item.ISNAmd) I found an exception like the method when executing it LINQ units do not recognize the 'Inter 32 index of (system string, system. String compromise)' method, and This method can not be translated to Store expression. Includes () method is sensitive by default, then I need to convert to minimize. Is there any method in which a string match match is examined and whether there is any method to solve the index question of the method? You actually have four options Databases globally Change the colon of it can be done in many ways, a simple Google search should reveal to them. Change the mix of individual tables or columns. Use a stored procedure and specify the call statement on your query Perform...
Read more

Pygame memory leak with transform.flip -

-
Today I came across an interesting issue which, by writing a small side scroller, instead of a sprite sheet, I was planning to use because I lacked a good "packer" for making phantom sheets (and honestly with patience and passion as it is only a test project). Anyway, I showed the animation running on the right of 8 PNG (with transparency). I considered it a good idea to prepare the flipped images to run on the left in the consultant, and the frame is not framed when the game is running (Flip actually consumes a lot of CPU like I Was measured). > To get access to the loop, I get the memory leak self.move_l = [# 8 PNG images with transparency to the right] For the self in IMG. Move_l: self.move_r.append (pygame.transform.flip (img, true, false) error traceback: traceback (most recent Call final): The file "D: \ Python 34 \ _Projects \ efg \ efg.py", in line 196, in the & lt; module & gt; main = master program ((1024, 680)) "D: \ Python ...
Read more