ulthon/ulthon_admin
1
0
Fork 0
mirror of https://gitee.com/ulthon/ulthon_admin.git synced 2026-07-08 19:12:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

使用更安全且更健壮的日志sql写法；

Browse Source
This commit is contained in:
augushong
2022-05-19 14:40:12 +08:00
parent e108c2dc87
commit 4f2912931e
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
extend/think/log/driver/DebugMysql.php
View File

@@ -128,19 +128,22 @@ class DebugMysql implements LogHandlerInterface
if (!is_null($this->pdo)) { if (!is_null($this->pdo)) {
foreach ($log_data as $key => &$value) { $prepare_name = [];
$value = str_replace('\'', '\\\'', $value); foreach ($log_data as $key => $value) {
$prepare_name[] = ':' . $key;
} }
$data_keys = array_keys($log_data); $data_keys = array_keys($log_data);
$data_keys_in_sql = join(',', $data_keys); $data_keys_in_sql = join(',', $data_keys);
$data_values_in_sql = join('\',\'', $log_data); $prepare_name_in_sql = join(',', $prepare_name);
$sql = "INSERT INTO {$this->tableName} ($data_keys_in_sql) VALUES ('$data_values_in_sql');"; $sql = "INSERT INTO {$this->tableName} ($data_keys_in_sql) VALUES ($prepare_name_in_sql);";
$this->pdo->exec($sql); $stmt = $this->pdo->prepare($sql);
$stmt->execute($log_data);
} else { } else {
fputcsv($this->fileRescource, $log_data); fputcsv($this->fileRescource, $log_data);