purovps/jshERP
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

为排序字段添加白名单验证

Browse Source
This commit is contained in:
jishenghua
2026-01-30 11:44:08 +08:00
parent b8758fb3f2
commit 1065be3c47
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
jshERP-boot/src/main/resources/mapper_xml/DepotHeadMapperEx.xml
View File

@@ -276,7 +276,12 @@
order by oper_time desc,number desc order by oper_time desc,number desc
</if> </if>
<if test="column != 'createTime'"> <if test="column != 'createTime'">
order by ${column} ${order} <if test="column == 'barCode' or column == 'operNumber' or column == 'unitPrice' or column == 'allPrice' or column == 'taxMoney'">
order by ${column}
<if test="order == 'asc' or order == 'desc'">
${order}
</if>
</if>
</if> </if>
<if test="offset != null and rows != null"> <if test="offset != null and rows != null">
limit #{offset},#{rows} limit #{offset},#{rows}
@@ -1425,4 +1430,4 @@
and dh.pay_type = '预付款' and dh.pay_type = '预付款'
and ifnull(dh.delete_flag,'0') !='1' and ifnull(dh.delete_flag,'0') !='1'
</select> </select>
</mapper> </mapper>