From 8bc7296fb4f8d87fc514a7ef04b8a419948de836 Mon Sep 17 00:00:00 2001 From: RuoYi <yzz_ivy@163.com> Date: 星期五, 20 十二月 2019 11:34:45 +0800 Subject: [PATCH] 添加HTML过滤器,用于去除XSS漏洞隐患 --- ruoyi/src/main/resources/mybatis/monitor/SysLogininforMapper.xml | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/ruoyi/src/main/resources/mybatis/monitor/SysLogininforMapper.xml b/ruoyi/src/main/resources/mybatis/monitor/SysLogininforMapper.xml index c5521a4..d62a0c4 100644 --- a/ruoyi/src/main/resources/mybatis/monitor/SysLogininforMapper.xml +++ b/ruoyi/src/main/resources/mybatis/monitor/SysLogininforMapper.xml @@ -33,11 +33,11 @@ <if test="userName != null and userName != ''"> AND user_name like concat('%', #{userName}, '%') </if> - <if test="params.beginTime != null and params.beginTime != ''"><!-- 开始时间检索 --> - and date_format(login_time,'%y%m%d') >= date_format(#{params.beginTime},'%y%m%d') + <if test="beginTime != null and beginTime != ''"><!-- 开始时间检索 --> + and date_format(login_time,'%y%m%d') >= date_format(#{beginTime},'%y%m%d') </if> - <if test="params.endTime != null and params.endTime != ''"><!-- 结束时间检索 --> - and date_format(login_time,'%y%m%d') <= date_format(#{params.endTime},'%y%m%d') + <if test="endTime != null and endTime != ''"><!-- 结束时间检索 --> + and date_format(login_time,'%y%m%d') <= date_format(#{endTime},'%y%m%d') </if> </where> </select> -- Gitblit v1.9.2