purovps/jshERP
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

处理可能存在的sql注入问题

Browse Source
This commit is contained in:
qiankunpingtai
2019-06-14 14:26:21 +08:00
parent 0d6c24d522
commit 221ae0a94e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/resources/mapper_xml/DepotItemMapperEx.xml
View File

@@ -170,7 +170,7 @@
select ifnull(sum(BasicNumber),0) as BasicNumber from jsh_depothead dh select ifnull(sum(BasicNumber),0) as BasicNumber from jsh_depothead dh
INNER JOIN jsh_depotitem di on dh.id=di.HeaderId and ifnull(di.delete_Flag,'0') !='1' INNER JOIN jsh_depotitem di on dh.id=di.HeaderId and ifnull(di.delete_Flag,'0') !='1'
where dh.type='入库' where dh.type='入库'
and di.MaterialId = ${mId} and di.DepotId = ${depotId} and di.MaterialId = #{mId} and di.DepotId = #{depotId}
and ifnull(dh.delete_Flag,'0') !='1' and ifnull(dh.delete_Flag,'0') !='1'
</select> </select>
@@ -179,7 +179,7 @@
INNER JOIN jsh_depotitem di on dh.id=di.HeaderId and ifnull(di.delete_Flag,'0') !='1' INNER JOIN jsh_depotitem di on dh.id=di.HeaderId and ifnull(di.delete_Flag,'0') !='1'
where dh.type='出库' where dh.type='出库'
and dh.SubType!='调拨' and dh.SubType!='调拨'
and di.MaterialId = ${mId} and di.DepotId = ${depotId} and di.MaterialId = #{mId} and di.DepotId = #{depotId}
and ifnull(dh.delete_Flag,'0') !='1' and ifnull(dh.delete_Flag,'0') !='1'
</select> </select>