duanchigeng4313 2017-02-15 16:47
浏览 416
已采纳

奇怪的行为GoLang将字符串存储到变量中的长度限制为64个字节

I have been trying to store a large string into a string variable in GoLang , but for some unknown reason GoLang is limiting the string to 64 Bytes in length

The main purpose of this string concatenation is to generate a couchbase's N1QL query at runtime based on user input

userInput := []string{"apple", "boy", "cat", "dog"} 
var buffer string 
buffer = "SELECT * FROM DB WHERE DB.ITEM_NAME="+userInput[0]+
         "OR DB.ITEM_NAME="+userInput[1]

In such a case if I debug on variable buffer, for example I can see it contains only until "SELECT * FROM DB WHERE DB.ITEM_NAME="+userInput[0]+OR" depending upon user input size it varies and it caps the string to 64th character

  • 写回答

1条回答 默认 最新

  • duancongduo4109 2017-02-15 20:55
    关注

    The behaviour is as expected. The behaviour is not strange.

    Your code creates obviously wrong Couchbase N1QL:

    package main
    
    import (
        "fmt"
    )
    
    func main() {
        userInput := []string{"apple", "boy", "cat", "dog"}
        var buffer string
        buffer = "SELECT * FROM DB WHERE DB.ITEM_NAME=" + userInput[0] +
            "OR DB.ITEM_NAME=" + userInput[1]
        fmt.Println(buffer)
    }
    

    Output:

    SELECT * FROM DB WHERE DB.ITEM_NAME=appleOR DB.ITEM_NAME=boy
    

    Here is a plausible solution:

    package main
    
    import (
        "fmt"
    )
    
    func main() {
        userInput := []string{"apple", "boy", "cat", "dog"}
        query := fmt.Sprintf(
            `SELECT * FROM DB WHERE DB.ITEM_NAME=%q OR DB.ITEM_NAME=%q;`,
            userInput[0], userInput[1],
        )
        fmt.Println(query)
    }
    

    Output:

    SELECT * FROM DB WHERE DB.ITEM_NAME="apple" OR DB.ITEM_NAME="boy";
    

    Note: Beware of SQL injection.

    References:

    The Go Programming Language Specification

    Couchbase: Query Language Tutorial

    Couchbase: Querying with N1QL

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 求差集那个函数有问题,有无佬可以解决
  • ¥15 【提问】基于Invest的水源涵养
  • ¥20 微信网友居然可以通过vx号找到我绑的手机号
  • ¥15 寻一个支付宝扫码远程授权登录的软件助手app
  • ¥15 解riccati方程组
  • ¥15 display:none;样式在嵌套结构中的已设置了display样式的元素上不起作用?
  • ¥15 使用rabbitMQ 消息队列作为url源进行多线程爬取时,总有几个url没有处理的问题。
  • ¥15 Ubuntu在安装序列比对软件STAR时出现报错如何解决
  • ¥50 树莓派安卓APK系统签名
  • ¥65 汇编语言除法溢出问题