prevent sql injection attack in dynamic query grails -

-

मेरे पास क्वेरी है: 

  def selectQuery = "select ins" def fromQuery = " InstituteStudent ins "def whereQuery =" जहां ins.institution =: inst "def compareQuery = [inst: inst]   
 और अन्य क्वेरी के रूप में:  
  यदि (params.p.Address! = "") {WhereQuery + = "और ins.address = '" + + पता + "' 'डीईफ़ चेक = इंस्टीट्यूशनट्यूडेंट। एक्सएक्यूट (" इन्स्टिट्यूशन इंस्टीट्यूशन्स से चयन करेंइंटरसइन्स्टेसशन =: इंस्ट एंड आईएस .address = '"+ पता +"' ", [inst: inst])}   
 अग्रिम खोज क्वेरी का परिणाम  
  def allQuery = selectQuery + FromQuery + whereQuery def finalQuery = InstitutionStudent.executeQuery (allQuery.toString (), तुलना करें)   
 लेकिन इंजेक्शन हमले की संभावना है ताकि इसे रोकने के लिए इस क्वेरी से पैरामीटरेटेड क्वेरी को कैसे पारित किया जाए?   
 
 
 आप सामान्य नामित पैरामीटर का उपयोग कर सकते हैं:  
  यदि (पैरामीटर PAddress! = "") {WhereQ Uery + = "और ins.address =: पता" compareQuery.address = address def चेक = इंस्टीट्यूशन छात्र। ExecuteQuery ("इंस्टीट्यूशनल इंस्टीट्यूशन इंस्टीट्यूट्स से इन्फोस इनस्टेक्शन =: inst और ins.address =: address", [inst: inst , पता: पता])}

Comments

Post a Comment

Popular posts from this blog

sql - Postgresql record to array -

-
I need to change back into an array to change lines from the array and filter the records. I am using info_schema._pg_expandarray in a SELECT query to get a line copy value in the array. Looking at the following array: "four" [] {i, i, o, t, b} _pg_expandarray leaves 5 rows with 1 row type record: records (I, 1) (i, 2) (o, 3) (t, 4) I have to filter this result set 't' to exclude record records. How can I do this? Should I convert back to the array? What is a way to filter the array directly? Thanks in advance. If your purpose is to create one set of the above rows, but remove the 't' in the line So, this is the trick: test => Information (i), 'o', 't', 'b' i. N --- --- --- i | 1 mother 2 o | 3b 5 (4 lines) As a side, unless you specifically want to return the index as a second column, then I unnest () information_schema._pg_expandarray () , which does not appear in the document and is probably...
Read more

c++ - Cmake produces file extensions in static library archives -

-
I have recently switched to autotools to cement, since the limiter cross platform is better for development and what I saw When I build a stable library of my C ++ code, all the files inside .cpp.o is a suffix ar income tax PA8 / libgenericTZR.a genericTZR.cpp.o I have seen other libraries made by other tools and they do not do it, I'm not sure this is the realm And there is a bad thing, but how can I create static libraries without cpp file extension? This is my CMake file add_executable (PA8 ISP_Charges.cpp genericTZR.cpp genericTZR.h) set (LIBSRC genericTZR.c genericTZR.h) add_library (genericTZR shared $ {LIBSRC}) add_library (genericTZR shared $$ TARGET_OBJECTS: myObjects & gt;) install add_library (Generic TZR-static static $ {LIBSRC}) set_target_properties (Generic TZR-Static Properties OUTPUT_NAME $ install (TARGETS PA8 DESTINATION BIN) TARGETS GENICTZR GENERICTZR-STATIC DESTINATION lib) Installed (files "$ {PROJECT_BINARY_DIR} /PA8/genericTZR.h...
Read more

Pygame memory leak with transform.flip -

-
Today I came across an interesting issue which, by writing a small side scroller, instead of a sprite sheet, I was planning to use because I lacked a good "packer" for making phantom sheets (and honestly with patience and passion as it is only a test project). Anyway, I showed the animation running on the right of 8 PNG (with transparency). I considered it a good idea to prepare the flipped images to run on the left in the consultant, and the frame is not framed when the game is running (Flip actually consumes a lot of CPU like I Was measured). > To get access to the loop, I get the memory leak self.move_l = [# 8 PNG images with transparency to the right] For the self in IMG. Move_l: self.move_r.append (pygame.transform.flip (img, true, false) error traceback: traceback (most recent Call final): The file "D: \ Python 34 \ _Projects \ efg \ efg.py", in line 196, in the & lt; module & gt; main = master program ((1024, 680)) "D: \ Python ...
Read more