业务逻辑代码遇到异常Exception = com.jfinal.plugin.activerecord.ActiveRecordException: java.sql.SQLException: sql injection violation, syntax error: syntax error, error in :'ct * mt.names,mt.title as picsids ,',expect DOT, actual DOT mt : select * mt.names,mt.title as picsids , up.path as videosids, mt.revision,up.path, up.originalfilename as message from pt_media_channel ch left join pt_media_channelmaterial ma on ch.ids = ma.channelids left join pt_media_material mt on ma.materialids=mt.ids left join pt_sys_upload up on mt.uploadids=up.ids where 1=1 <% if(!isEmpty(ids)){ %> and ch.ids = #'$ids$'# <% } %> <% if(!isEmpty(companyIds)){ %> and ch.companyids = #'$companyIds$'# <% } %> at com.jfinal.plugin.activerecord.Model.find(Model.java:606) at com.funmy.medicine.mvc.product.ProductService.IVAll(ProductService.java:46) at com.funmy.medicine.mvc.product.ProductController.view(ProductController.java:117
2条回答 默认 最新
悬赏问题
- ¥15 C#算法问题, 不知道怎么处理这个数据的转换
- ¥15 YoloV5 第三方库的版本对照问题
- ¥15 请完成下列相关问题!
- ¥15 drone 推送镜像时候 purge: true 推送完毕后没有删除对应的镜像,手动拷贝到服务器执行结果正确在样才能让指令自动执行成功删除对应镜像,如何解决?
- ¥15 求daily translation(DT)偏差订正方法的代码
- ¥15 js调用html页面需要隐藏某个按钮
- ¥15 ads仿真结果在圆图上是怎么读数的
- ¥20 Cotex M3的调试和程序执行方式是什么样的?
- ¥20 java项目连接sqlserver时报ssl相关错误
- ¥15 一道python难题3