Exemple #1
0
  @Override
  public int updateCertainPost(PostModel post) {
    Object[] params =
        new Object[] {post.getTitle(), post.getContents(), post.getDate(), post.getPostId()};
    String fq = PostSql.updateCertainPost;
    String dq = SqlInjectionFilter.getBoundSql(fq, params);

    logger.info(dq);

    int filter = SqlInjectionFilter.isFiltered(this.getJdbcTemplate());

    if (dq != null
        && (filter == 0
            || ((filter == 1 && !SqlInjectionFilter.isSQLiR(fq, dq))
                || (filter == 2 && !SqlInjectionFilter.isSQLiQ(fq, dq))))) {
      this.getJdbcTemplate().update(dq);
      return 0;
    } else return 1;
  }