From ee4b4de7b1096c346ea02c7b5322af75e8c6835e Mon Sep 17 00:00:00 2001
From: HR.Hu <418836876@qq.com>
Date: 星期四, 23 七月 2020 21:01:18 +0800
Subject: [PATCH] 修复 代码生成器默认mapper路径与默认mapperScan路径不一致的bug

---
 ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java |    7 ++++---
 1 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java b/ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java
index b8aeaa1..39e88ef 100644
--- a/ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java
+++ b/ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java
@@ -1,5 +1,6 @@
 package com.ruoyi.common.utils.sql;
 
+import com.ruoyi.common.exception.BaseException;
 import com.ruoyi.common.utils.StringUtils;
 
 /**
@@ -10,9 +11,9 @@
 public class SqlUtil
 {
     /**
-     * 仅支持字母、数字、下划线、空格、逗号(支持多个字段排序)
+     * 仅支持字母、数字、下划线、空格、逗号、小数点(支持多个字段排序)
      */
-    public static String SQL_PATTERN = "[a-zA-Z0-9_\\ \\,]+";
+    public static String SQL_PATTERN = "[a-zA-Z0-9_\\ \\,\\.]+";
 
     /**
      * 检查字符,防止注入绕过
@@ -21,7 +22,7 @@
     {
         if (StringUtils.isNotEmpty(value) && !isValidOrderBySql(value))
         {
-            return StringUtils.EMPTY;
+            throw new BaseException("参数不符合规范,不能进行查询");
         }
         return value;
     }

--
Gitblit v1.9.2