java程序:mysql特殊字符处理

最新推荐文章于 2026-05-08 16:14:38 发布

转载最新推荐文章于 2026-05-08 16:14:38 发布 · 5.7k 阅读

标签

#mysql #java #string #null #c

#class

收录于

MYSQL 同时被 2 个专栏收录

9 篇文章

订阅专栏

SQL 注入

2 篇文章

订阅专栏

本文介绍了一个用于编码SQL标签的工具，该工具使用了映射表来转换特定字符，以避免SQL注入攻击。

package test; import java.util.HashMap; import java.util.Map; public class MYSQLEncoder { private static Map<String,String> referencesMap = new HashMap<String,String>(); static{ referencesMap.put("'","//'"); referencesMap.put("/"","///""); referencesMap.put("//","////"); referencesMap.put(" ","// "); referencesMap.put("/0","///0"); referencesMap.put("/b","///b"); referencesMap.put(" ","// "); referencesMap.put("/t","///t"); referencesMap.put("/f","///f"); } //escape sql tag with the source code. public static String encode(String source) { if (source == null) return ""; StringBuffer sbuffer = new StringBuffer(source.length()); for (int i = 0; i < source.length(); i++) { String c = source.substring(i,i+1); //System.out.println("c=" + c); //System.out.println(referencesMap.get(c)); if (referencesMap.get(c) != null) { sbuffer.append(referencesMap.get(c)); } else { sbuffer.append(c); } } return sbuffer.toString(); } public static void main(String[] args){ String tt = encode("They'are /"ok/". //a"); System.out.print(tt); } }