Examples with MySqlWallProvider com.alibaba.druid.wall.spi.MySqlWallProvider used on opensource projects

Example 46 with MySqlWallProvider

use of com.alibaba.druid.wall.spi.MySqlWallProvider in project druid by alibaba.

the class MySqlWallTest141 method test_false.

public void test_false() throws Exception {
    WallProvider provider = new MySqlWallProvider();
    String sql = "SELECT name, '******' password, createTime from user where length(name) = 999999.9 or ascii(substring((database()),1,1))=127";
    Assert.assertFalse(provider.checkValid(sql));
}

Example 47 with MySqlWallProvider

use of com.alibaba.druid.wall.spi.MySqlWallProvider in project druid by alibaba.

the class MySqlWallTest143 method test_false.

public void test_false() throws Exception {
    WallProvider provider = new MySqlWallProvider();
    String sql = //
    "SELECT" + //
    " `Extent1`.`ID`, " + //
    " `Extent1`.`State`, " + //
    " `Extent1`.`CreateTime`, " + //
    " `Extent1`.`UpdateTime`, " + //
    " `Extent1`.`OpeningBank`, " + //
    " `Extent1`.`BankAccount`, " + //
    " `Extent1`.`BankAccountName`, " + //
    " `Extent1`.`Zone`, " + //
    " `Extent1`.`AccountantMobile`, " + //
    " `Extent1`.`IsPublic`" + //
    " FROM `paybank` AS `Extent1`" + //
    " WHERE (`Extent1`.`State` > -1)" + " AND ((`Extent1`.`Zone`) = (CASE WHEN (1 IS  NULL) THEN (1)  ELSE (1) END))";
    Assert.assertTrue(provider.checkValid(sql));
}

Example 48 with MySqlWallProvider

use of com.alibaba.druid.wall.spi.MySqlWallProvider in project druid by alibaba.

the class MySqlWallTest43 method test_false.

public void test_false() throws Exception {
    WallProvider provider = new MySqlWallProvider();
    Assert.assertFalse(//
    provider.checkValid(//
    "SELECT COUNT(1) AS count FROM `team` " + "WHERE `team_type` = 'normal' AND 1 = 1 AND `city_id` IN (0,10)"));
    Assert.assertEquals(1, provider.getTableStats().size());
}

Example 49 with MySqlWallProvider

use of com.alibaba.druid.wall.spi.MySqlWallProvider in project druid by alibaba.

the class MySqlWallTest43 method test_false2.

public void test_false2() throws Exception {
    WallProvider provider = new MySqlWallProvider();
    Assert.assertFalse(//
    provider.checkValid(//
    "SELECT COUNT(1) AS count FROM `team` " + "WHERE `team_type` = 'normal' AND 1 = 2 AND `city_id` IN (0,10)"));
    Assert.assertEquals(1, provider.getTableStats().size());
}

Example 50 with MySqlWallProvider

use of com.alibaba.druid.wall.spi.MySqlWallProvider in project druid by alibaba.

the class MySqlWallTest45 method test_false.

public void test_false() throws Exception {
    WallProvider provider = new MySqlWallProvider();
    Assert.assertTrue(//
    provider.checkValid("SELECT @1119453529t_processID, @1119453529t_ret"));
    Assert.assertEquals(0, provider.getTableStats().size());
}