From 947d0ed1a628353f42ac4c2aa817a4579cdf126d Mon Sep 17 00:00:00 2001
From: king <18310653075@163.com>
Date: 星期日, 05 十一月 2023 11:29:04 +0800
Subject: [PATCH] Merge branch 'positec' into dms

---
 src/utils/utils-custom.js |  147 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 files changed, 147 insertions(+), 0 deletions(-)

diff --git a/src/utils/utils-custom.js b/src/utils/utils-custom.js
index 6e80931..350ccc7 100644
--- a/src/utils/utils-custom.js
+++ b/src/utils/utils-custom.js
@@ -1,4 +1,5 @@
 import md5 from 'md5'
+import { notification } from 'antd'
 
 export default class MenuUtils {
   /**
@@ -1702,4 +1703,150 @@
   }
 
   return errors
+}
+
+/**
+ * @description 妫�娴媠ql
+ */
+export function checkSQL(sql, type) {
+  if (!sql) return true
+
+  let label = '鏁版嵁婧愪腑'
+  if (type === 'customscript') {
+    label = '鑷畾涔塻ql璇彞涓�'
+  }
+
+  let _quot = sql.match(/'{1}/g)
+  let _lparen = sql.match(/\({1}/g)
+  let _rparen = sql.match(/\){1}/g)
+
+  _quot = _quot ? _quot.length : 0
+  _lparen = _lparen ? _lparen.length : 0
+  _rparen = _rparen ? _rparen.length : 0
+
+  if (_quot % 2 !== 0) {
+    notification.warning({
+      top: 92,
+      message: 'sql涓璡'蹇呴』鎴愬鍑虹幇',
+      duration: 5
+    })
+    return false
+  } else if (_lparen !== _rparen) {
+    notification.warning({
+      top: 92,
+      message: 'sql涓�()蹇呴』鎴愬鍑虹幇',
+      duration: 5
+    })
+    return false
+  } else if (/--/ig.test(sql)) {
+    let lines = []
+    sql.split(/\n/).forEach((s, i) => {
+      if (/--/ig.test(s)) {
+        lines.push(i + 1)
+      }
+    })
+
+    lines = lines.join('銆�')
+    lines = lines ? '(绗�' + lines + '琛�)' : ''
+
+    notification.warning({
+      top: 92,
+      message: label + `${lines}锛屼笉鍙嚭鐜板瓧绗� -- 锛屾敞閲婅鐢� /*鍐呭*/`,
+      duration: 5
+    })
+    return false
+  } else if (/,,/ig.test(sql)) {
+    let lines = []
+    sql.split(/\n/).forEach((s, i) => {
+      if (/,,/ig.test(s)) {
+        lines.push(i + 1)
+      }
+    })
+
+    lines = lines.join('銆�')
+    lines = lines ? '(绗�' + lines + '琛�)' : ''
+
+    notification.warning({
+      top: 92,
+      message: label + `${lines}锛屼笉鍙嚭鐜拌繛缁殑鑻辨枃閫楀彿,,`,
+      duration: 5
+    })
+    return false
+  } else if (/鈥榺鈥�/ig.test(sql)) {
+    let lines = []
+    sql.split(/\n/).forEach((s, i) => {
+      if (/鈥榺鈥�/ig.test(s)) {
+        lines.push(i + 1)
+      }
+    })
+
+    lines = lines.join('銆�')
+    lines = lines ? '(绗�' + lines + '琛�)' : ''
+
+    notification.warning({
+      top: 92,
+      message: label + `${lines}锛屼笉鍙嚭鐜颁腑鏂囧崟寮曞彿`,
+      duration: 5
+    })
+    return false
+  } else if (type === 'customscript' && /\son\s+[a-z0-9_]+\.[a-z0-9_]+\s*=\s*[a-z0-9_]+\.[a-z0-9_]+/ig.test(sql)) {
+    let list = sql.match(/\son\s+[a-z0-9_]+\.[a-z0-9_]+\s*=\s*[a-z0-9_]+\.[a-z0-9_]+/ig)
+    let errors = []
+    list.forEach(str => {
+      str = str.replace(/^\s/, '')
+      let strs = str.match(/(\s|=)[a-z0-9_]+\./ig)
+      if (strs.length === 2 && (strs[0].replace(/\s|\./g, '') === strs[1].replace(/\s|\./g, ''))) {
+        errors.push(str)
+      }
+    })
+
+    if (errors.length > 0) {
+      notification.warning({
+        top: 92,
+        message: '涓嶅彲浣跨敤鍚屼竴涓〃瀛楁杩涜鍏宠仈锛�' + errors.join('銆�'),
+        duration: 5
+      })
+      return false
+    }
+  }
+
+  let error = ''
+  let chars = [
+    {key: 'create', reg: /(^|\s|\(|\))create\s/ig},
+    {key: 'insert', reg: /(^|\s|\(|\))insert\s/ig},
+    {key: 'delete', reg: /(^|\s|\(|\))delete\s/ig},
+    {key: 'update', reg: /(^|\s|\(|\))update\s/ig},
+    {key: 'set', reg: /(^|\s|\(|\))set\s/ig},
+    {key: 'drop', reg: /(^|\s|\(|\))drop\s/ig},
+    {key: 'alter', reg: /(^|\s|\(|\))alter\s/ig},
+    {key: 'truncate', reg: /(^|\s|\(|\))truncate\s/ig},
+    {key: 'if', reg: /(^|\s|\(|\))if\s/ig},
+    {key: 'exec', reg: /(^|\s|\(|\))exec(\s|\()/ig},
+    {key: 'OBJECT', reg: /(^|\s|\(|\))object(\s|\()/ig},
+    {key: 'sys.', reg: /(^|\s|\(|\))sys\./ig},
+    {key: 'kill', reg: /(^|\s|\(|\))kill\s/ig}
+  ]
+  
+  if (type === 'customscript') {
+    chars = chars.filter(char => !['create', 'insert', 'delete', 'update', 'set', 'drop', 'if', 'exec'].includes(char.key))
+  }
+  
+  sql = sql.replace(/sys\.fn_/ig, '') // 璺宠繃sys.fn_楠岃瘉
+
+  chars.forEach(char => {
+    if (!error && char.reg.test(sql)) {
+      error = char.key
+    }
+  })
+
+  if (error) {
+    notification.warning({
+      top: 92,
+      message: 'sql涓笉鍙娇鐢�' + error,
+      duration: 5
+    })
+    return false
+  }
+
+  return true
 }
\ No newline at end of file

--
Gitblit v1.8.0