ynu / ecard-api

ecard-api

This repo is deprecated, use https://github.com/ynu/ynu-ecard-api/ instead.

ecard-api's Issues

避免SQL注入

查询方法应当在接收参数后对参数进行校验，以免遭到SQL注入攻击。

每次只需查询都输出大量日志，影响正常使用。

每次查询都会有大量日志输出：

getShopBill: Executing select shopname as shopName, accdate as accDate, transcnt as transCnt, dramt as drAmt, cramt as crAmt from t_shop_bill where shopname=(select distinct shopname from t_shop where shopid="undefined") and accdate="20170109";
Executing select shopname as shopName, accdate as accDate, transcnt as transCnt, dramt as drAmt, cramt as crAmt from t_shop_bill where shopname=(select distinct shopname from t_shop where shopid="undefined") and accdate="20170109"; return empty result

应该设置一个开关，用来指定是否输出日志。