prevent sql injection attack in dynamic query grails -

-

मेरे पास क्वेरी है: 

  def selectQuery = "select ins" def fromQuery = " InstituteStudent ins "def whereQuery =" जहां ins.institution =: inst "def compareQuery = [inst: inst]   
 और अन्य क्वेरी के रूप में:  
  यदि (params.p.Address! = "") {WhereQuery + = "और ins.address = '" + + पता + "' 'डीईफ़ चेक = इंस्टीट्यूशनट्यूडेंट। एक्सएक्यूट (" इन्स्टिट्यूशन इंस्टीट्यूशन्स से चयन करेंइंटरसइन्स्टेसशन =: इंस्ट एंड आईएस .address = '"+ पता +"' ", [inst: inst])}   
 अग्रिम खोज क्वेरी का परिणाम  
  def allQuery = selectQuery + FromQuery + whereQuery def finalQuery = InstitutionStudent.executeQuery (allQuery.toString (), तुलना करें)   
 लेकिन इंजेक्शन हमले की संभावना है ताकि इसे रोकने के लिए इस क्वेरी से पैरामीटरेटेड क्वेरी को कैसे पारित किया जाए?   
 
 
 आप सामान्य नामित पैरामीटर का उपयोग कर सकते हैं:  
  यदि (पैरामीटर PAddress! = "") {WhereQ Uery + = "और ins.address =: पता" compareQuery.address = address def चेक = इंस्टीट्यूशन छात्र। ExecuteQuery ("इंस्टीट्यूशनल इंस्टीट्यूशन इंस्टीट्यूट्स से इन्फोस इनस्टेक्शन =: inst और ins.address =: address", [inst: inst , पता: पता])}

Comments

Post a Comment

Popular posts from this blog

jsp - No mapping found for HTTP request with URI with annotation config Spring MVC and Jetty -

-
Image
I'm only using annotation configuration, the server starts, but when I use some pages error is displayed: Warning: no mapping found for HTTP request with URI [/WEB-INF/view/main.jsp] name 'org.springframework.web.servlet.DispatcherServlet -D7259e with DispatcherServlet in Controller mapping works fine, but no JSP page is full. I am using Jetty 9.2.0.M0 and Spring MVC 4.0.4 release. JetTyP Config: Private Static Last String CONTEXT_PATH = "/"; Private Static Last String MAPPING_URL = "/ *"; Private Zero Server (Int port) throws exceptions {server server = new server (port); Server.addLifeCycleListener (New LifeCycleListener ()); Server.setHandler (getServletContextHandler (getContext ())); Server.start (); Server.join (); } Private static ServletContextHandler getServletContextHandler (WebApplicationContext context) throws IOException {LOGGER.info ( "ServletContextHandler is ready"); CircleContaxHandler themeHandler = new circactont...
Read more

java - Ajax call to jsp and jsp redirecting to further jsp -

-
I am getting an Ajax call on a jsp page which in turn is redirecting based on the value of a flag variable JSP file. The AJAX call is something like this: $ Ajax ({url: 'uploadwebcamimage.jsp', type: "post", data: {encodeimg: dataUrl, OwnerId: document.Clickpictures.OwnerId.value, OwnerPhone: document.Clickpictures.OwnerPhone.value, mobilepass: document.Clickpictures. Mobilepass.value, emailpass: document.Clickpictures.emailpass.value, mypassword: document.Clickpictures.mypassword.value, mygroupuserid: document.Clickpictures.mygroupuserid.value}, error: work () {warning ('error');} success : Function (msg) {// warning ((msg)); if (msg) indexOf ("true")> = 0) {// how grouplist location.href = "site_index_groupadmin.jsp res1 =?" + to get the grouplist;} else {warning ("unsuccessful");}}}); And in jsp I have done something like this: & lt;% ArrayList & lt; String & gt; List = New Arrestist & lt; Stri...
Read more

runtime error - Cannot find an overload for op_subtraction when subtracting datetime from datetime in powershell -

-
I can not get a surcharge for the error of op_subtraction error while running the code given below, Reporting that the second argument is invalid. The defective line is: if ($ - now - (non-job- $ $ job id.) PSBeginTime -gt [Timespain] :: From Minutes ($ KillTaskTimeMins) { (changed below for help with debugging) if (($ $ - $ when) -gt [Timespain]: : Minutes ($ killTaskTimeMins)) Full code: $ ($ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ throttle jobs are moving at any one time (@ (Get-jobs | object-object {$ _. state -akyu 'Running'}). Count-gate $ throttle) {start-Sleep- Millisecun $ $ Throttle Sleep MMS # Matter any work speculation, kill after X minutes = now $ = matching-date forwarding ($ job-in @ (Get-Job -State Running)) {# $ when = Coalesce (Get- Job -Id $ job.id) .PSBeginTime, $ now) is a custom task to make sure that it is not zero; but the writeer did not help to host, but it was not empty, however $$ = (Get-Job-$ job.id) was removed. PSBeginTime ...
Read more