Browse Source

修正SQL注入的查询问题

Signed-off-by: zouap <zouap@pcl.ac.cn>
V20221228.patch
zouap 2 years ago
parent
commit
2d116d67c7
1 changed files with 8 additions and 17 deletions
  1. +8
    -17
      models/ai_model_manage.go

+ 8
- 17
models/ai_model_manage.go View File

@@ -237,13 +237,10 @@ func QueryModelConvertByName(name string, repoId int64) ([]*AiModelConvert, erro
func QueryModelConvertById(id string) (*AiModelConvert, error) { func QueryModelConvertById(id string) (*AiModelConvert, error) {
sess := x.NewSession() sess := x.NewSession()
defer sess.Close() defer sess.Close()
sess.Select("*").Table(new(AiModelConvert)).Where("id='" + id + "'")
aiModelManageConvertList := make([]*AiModelConvert, 0)
err := sess.Find(&aiModelManageConvertList)
if err == nil {
if len(aiModelManageConvertList) == 1 {
return aiModelManageConvertList[0], nil
}
re := new(AiModelConvert)
isExist, err := sess.Table(new(AiModelConvert)).ID(id).Get(re)
if err == nil && isExist {
return re, nil
} }
return nil, err return nil, err
} }
@@ -251,16 +248,10 @@ func QueryModelConvertById(id string) (*AiModelConvert, error) {
func QueryModelById(id string) (*AiModelManage, error) { func QueryModelById(id string) (*AiModelManage, error) {
sess := x.NewSession() sess := x.NewSession()
defer sess.Close() defer sess.Close()
sess.Select("*").Table("ai_model_manage").
Where("id='" + id + "'")
aiModelManageList := make([]*AiModelManage, 0)
err := sess.Find(&aiModelManageList)
if err == nil {
if len(aiModelManageList) == 1 {
return aiModelManageList[0], nil
}
} else {
log.Info("error=" + err.Error())
re := new(AiModelManage)
isExist, err := sess.Table(new(AiModelManage)).ID(id).Get(re)
if err == nil && isExist {
return re, nil
} }
return nil, err return nil, err
} }


Loading…
Cancel
Save