Skip to content

加入多租户管理后数据表无法正常更新 #1640

Closed
@yanchenchen

Description

@yanchenchen
版本号:

2.2.1

问题描述:

某个表加入多租户管理后,无法正常更新,报错误:“sql injection violation, part alway true condition not allow”
应该是有个永真式 1=1在中间。

截图&代码:

错误

友情提示: 未按格式要求发帖,会直接删掉。

Activity

zhangdaiscott

zhangdaiscott commented on Aug 24, 2020

@zhangdaiscott
Member

1=1 是jeecg加的还是你这边编码加的?

yanchenchen

yanchenchen commented on Aug 24, 2020

@yanchenchen
Author

系统自己加的。

yanchenchen

yanchenchen commented on Aug 24, 2020

@yanchenchen
Author

通过online的功能测试有这个问题,生产代码部署则没有这个问题。

tygithub1

tygithub1 commented on Sep 3, 2020

@tygithub1

这个可以临时修改MybatisPlusConfig类,判断如果是update操作不走过滤器,他就不会报这个错误了
paginationInterceptor.setSqlParserFilter(new ISqlParserFilter() {
@OverRide
public boolean doFilter(MetaObject metaObject) {
MappedStatement ms = SqlParserHelper.getMappedStatement(metaObject);
if(ms.getSqlCommandType()== SqlCommandType.UPDATE){
return true;
}
return false;
}
});

zhangdaiscott

zhangdaiscott commented on Sep 4, 2020

@zhangdaiscott
Member

已经处理,下个版本发布

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @zhangdaiscott@yanchenchen@tygithub1

        Issue actions

          加入多租户管理后数据表无法正常更新 · Issue #1640 · jeecgboot/JeecgBoot