
复制package cn.javanode.thread; import java.util.regex.Pattern; /** * @author xgt(小光头) * @version 1.0 * @date 2021-1-8 11:48 */ public class CheckSqlDemo { /**正则表达式**/ private static String reg = "(?最新L注:)|(?:--)|(/\\*(?:.|[\\n\\r])*?\\*/)|" + "(\\b(select|update|union|and|or|delete|insert|trancate|char|into|substr|ascii|declare|exec|count|master|into|drop|execute)\\b)"; private static Pattern sqlPattern = Pattern.compile(reg, Pattern.CASE_INSENSITIVE); private static boolean isValid(String str) { if (sqlPattern.matcher(str).find()) { System.out.println("未能通过过滤器:str=" + str); returnfalse; } returntrue; } publicstatic void main(String[] args) { System.out.println(isValid("tongji_user_add")); } } 1.2.3.4.5.6.7.8.9.10.11.12.13.14.15.16.17.18.19.20.21.22.23.24.25.26.27.28.29.30.31.32.