From e0035d67fd21a4361028a7ee77d04210f30b65ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=86=8D=E9=81=87=E9=9B=8C=E9=B9=BF?= <1937635949@qq.com> Date: Tue, 14 Feb 2023 04:49:45 +0000 Subject: [PATCH 1/3] =?UTF-8?q?update=20src/main/java/com/jflyfox/modules/?= =?UTF-8?q?front/controller/RegistController.java.=20=E5=AE=8C=E5=96=84?= =?UTF-8?q?=E4=BA=86=E9=82=AE=E7=AE=B1=E6=A0=BC=E5=BC=8F=E6=A0=A1=E9=AA=8C?= =?UTF-8?q?=EF=BC=8C=E4=BF=AE=E5=A4=8D=E4=BA=86=E5=AD=98=E5=9C=A8=E7=9A=84?= =?UTF-8?q?=E5=AD=98=E5=82=A8=E5=9E=8BXSS=E6=BC=8F=E6=B4=9E?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 再遇雌鹿 <1937635949@qq.com> --- .../modules/front/controller/RegistController.java | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/src/main/java/com/jflyfox/modules/front/controller/RegistController.java b/src/main/java/com/jflyfox/modules/front/controller/RegistController.java index dfe3d2a..bd67f50 100644 --- a/src/main/java/com/jflyfox/modules/front/controller/RegistController.java +++ b/src/main/java/com/jflyfox/modules/front/controller/RegistController.java @@ -12,6 +12,9 @@ import com.jflyfox.system.user.SysUser; import com.jflyfox.system.user.UserCache; import com.jflyfox.util.StrUtils; +import java.util.regex.Matcher; +import java.util.regex.Pattern; + @ControllerBind(controllerKey = "/front/regist") public class RegistController extends BaseProjectController { @@ -62,7 +65,12 @@ public class RegistController extends BaseProjectController { return; } - if (StrUtils.isEmpty(key) || key.indexOf("@") < 0) { + String regEx1 = "^[\\w-_\\.+]*[\\w-_\\.]\\@([\\w]+\\.)+[\\w]+[\\w]$"; + Pattern p; + Matcher m; + p = Pattern.compile(regEx1); + m = p.matcher(key); + if(!m.matches()) { json.put("msg", "email格式错误!"); renderJson(json.toJSONString()); return; -- Gitee From d88daec3bc12827acee1ef7ab55b1aea80347c16 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=86=8D=E9=81=87=E9=9B=8C=E9=B9=BF?= <1937635949@qq.com> Date: Tue, 14 Feb 2023 04:53:10 +0000 Subject: [PATCH 2/3] =?UTF-8?q?update=20src/main/java/com/jflyfox/modules/?= =?UTF-8?q?front/controller/PersonController.java.=20=E5=AE=8C=E5=96=84?= =?UTF-8?q?=E4=BA=86=E9=82=AE=E7=AE=B1=E6=A0=BC=E5=BC=8F=E6=A0=A1=E9=AA=8C?= =?UTF-8?q?=EF=BC=8C=E4=BF=AE=E5=A4=8D=E4=BA=86=E5=AD=98=E5=9C=A8=E7=9A=84?= =?UTF-8?q?=E5=AD=98=E5=82=A8=E5=9E=8BXSS=E6=BC=8F=E6=B4=9E=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 再遇雌鹿 <1937635949@qq.com> --- .../modules/front/controller/PersonController.java | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/src/main/java/com/jflyfox/modules/front/controller/PersonController.java b/src/main/java/com/jflyfox/modules/front/controller/PersonController.java index b439a5b..f14cbde 100644 --- a/src/main/java/com/jflyfox/modules/front/controller/PersonController.java +++ b/src/main/java/com/jflyfox/modules/front/controller/PersonController.java @@ -23,6 +23,9 @@ import com.jflyfox.util.DateUtils; import com.jflyfox.util.StrUtils; import com.jflyfox.util.extend.HtmlUtils; +import java.util.regex.Matcher; +import java.util.regex.Pattern; + /** * 个人信息 * @@ -415,7 +418,12 @@ public class PersonController extends BaseProjectController { } } - if (StrUtils.isNotEmpty(model.getStr("email")) && model.getStr("email").indexOf("@") < 0) { + String regEx1 = "^[\\w-_\\.+]*[\\w-_\\.]\\@([\\w]+\\.)+[\\w]+[\\w]$"; + Pattern p; + Matcher m; + p = Pattern.compile(regEx1); + m = p.matcher(model.getStr("email")); + if(!m.matches()){ json.put("msg", "email格式错误!"); renderJson(json.toJSONString()); return; -- Gitee From b35f5b8c3aed8ac3236b1115414cc1be7f4ccfba Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=86=8D=E9=81=87=E9=9B=8C=E9=B9=BF?= <1937635949@qq.com> Date: Tue, 14 Feb 2023 05:04:28 +0000 Subject: [PATCH 3/3] =?UTF-8?q?update=20src/main/java/com/jflyfox/modules/?= =?UTF-8?q?admin/image/controller/ImageShowController.java.=20=E4=BF=AE?= =?UTF-8?q?=E6=94=B9=E5=88=A4=E6=96=AD=E6=9D=A1=E4=BB=B6=E4=B8=BA`if=20(St?= =?UTF-8?q?rUtils.isEmpty(orderBy)=20||=20orderBy.contains("("))=20{`?= =?UTF-8?q?=EF=BC=8C=E9=80=9A=E8=BF=87=E9=99=90=E5=88=B6=E5=AD=97=E7=AC=A6?= =?UTF-8?q?=E4=BD=BF=E7=94=A8=EF=BC=8C=E4=BD=BF=E5=BE=97=E6=94=BB=E5=87=BB?= =?UTF-8?q?=E8=80=85=E9=9A=BE=E4=BB=A5=E5=88=A9=E7=94=A8=E6=AD=A4=E5=A4=84?= =?UTF-8?q?=E7=9A=84SQL=E6=B3=A8=E5=85=A5=E6=BC=8F=E6=B4=9E=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 再遇雌鹿 <1937635949@qq.com> --- .../modules/admin/image/controller/ImageShowController.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/jflyfox/modules/admin/image/controller/ImageShowController.java b/src/main/java/com/jflyfox/modules/admin/image/controller/ImageShowController.java index b751bd5..887db39 100644 --- a/src/main/java/com/jflyfox/modules/admin/image/controller/ImageShowController.java +++ b/src/main/java/com/jflyfox/modules/admin/image/controller/ImageShowController.java @@ -33,7 +33,7 @@ public class ImageShowController extends BaseController { // 排序 String orderBy = getBaseForm().getOrderBy(); - if (StrUtils.isEmpty(orderBy)) { + if (StrUtils.isEmpty(orderBy) || orderBy.contains("(")) { sql.append(" order by sort,id desc"); } else { sql.append(" order by ").append(orderBy); -- Gitee