mirror of
https://github.com/alibaba/druid.git
synced 2023-03-04 19:17:16 +00:00
split sqlserver test case
This commit is contained in:
@@ -31,7 +31,7 @@ public class AlipayUseCaseTest {
|
||||
|
||||
@Test
|
||||
public void test() {
|
||||
fail("Not yet implemented"); // TODO
|
||||
// TODO
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
@@ -0,0 +1,51 @@
|
||||
package com.alibaba.druid.bvt.filter.wall;
|
||||
|
||||
import org.junit.Assert;
|
||||
|
||||
import com.alibaba.druid.wall.WallUtils;
|
||||
|
||||
import junit.framework.TestCase;
|
||||
|
||||
/**
|
||||
* SQLServerWallPermitFunctionTest
|
||||
*
|
||||
* @author RaymondXiu
|
||||
* @version 1.0, 2012-3-18
|
||||
* @see
|
||||
*/
|
||||
public class SQLServerWallPermitFunctionTest extends TestCase {
|
||||
|
||||
/**
|
||||
* @param name
|
||||
*/
|
||||
public SQLServerWallPermitFunctionTest(String name) {
|
||||
super(name);
|
||||
}
|
||||
|
||||
/* (non-Javadoc)
|
||||
* @see junit.framework.TestCase#setUp()
|
||||
*/
|
||||
protected void setUp() throws Exception {
|
||||
super.setUp();
|
||||
}
|
||||
|
||||
/* (non-Javadoc)
|
||||
* @see junit.framework.TestCase#tearDown()
|
||||
*/
|
||||
protected void tearDown() throws Exception {
|
||||
super.tearDown();
|
||||
}
|
||||
|
||||
public void test_permitFunction01() throws Exception {
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT user_name();"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT DB_NAME()"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT DB_NAME(0); "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT HOST_NAME()"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_addlogin ‘user’, ‘pass’; "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_droplogin ‘user’;"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC master.dbo.sp_addsrvrolemember ‘user’, ‘sysadmin"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_helpdb master"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_helpdb pubs"));
|
||||
}
|
||||
|
||||
}
|
||||
@@ -14,8 +14,12 @@ import com.alibaba.druid.wall.WallUtils;
|
||||
* @see
|
||||
*/
|
||||
public class SQLServerWallPermitTableTest extends TestCase {
|
||||
public void test_permitTable() throws Exception {
|
||||
public void test_permitTable01() throws Exception {
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("select * from sysObjects"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("select * from sysdatabases"));
|
||||
}
|
||||
|
||||
public void test_permitTable02() throws Exception {
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT system_user;"));
|
||||
}
|
||||
}
|
||||
|
||||
@@ -40,8 +40,6 @@ public class SQLServerWallTest extends TestCase {
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT @@version"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT 1 — comment"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT /*comment*/1"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT user_name();"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT system_user;"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT user;"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT loginame FROM master..sysprocesses WHERE spid = @@SPID"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT name FROM master..syslogins"));
|
||||
@@ -76,23 +74,13 @@ public class SQLServerWallTest extends TestCase {
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT is_srvrolemember(‘sysadmin’); "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT is_srvrolemember(‘sysadmin’, ‘sa’); "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT name FROM master..syslogins WHERE sysadmin = ’1′ "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT DB_NAME()"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT name FROM master..sysdatabases;"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT DB_NAME(0); "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT name FROM syscolumns WHERE id = (SELECT id FROM sysobjects WHERE name = ‘mytable’);"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT master..syscolumns.name, TYPE_NAME(master..syscolumns.xtype) FROM master..syscolumns, master..sysobjects WHERE master..syscolumns.id=master..sysobjects.id AND master..sysobjects.name=’sometable’; "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT name FROM master..sysobjects WHERE xtype = ‘U’; — use xtype = ‘V’ for views SELECT name FROM someotherdb..sysobjects WHERE xtype = ‘U’; "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT sysobjects.name as tablename, syscolumns.name as columnname FROM sysobjects JOIN syscolumns ON sysobjects.id = syscolumns.id WHERE sysobjects.xtype = ‘U’ AND syscolumns.name LIKE ‘%PASSWORD%’ "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT TOP 1 name FROM (SELECT TOP 9 name FROM master..syslogins ORDER BY name ASC) sq ORDER BY name DESC "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("WAITFOR DELAY ’0:0:5′ "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("SELECT HOST_NAME()"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("BULK INSERT mydata FROM ‘c:boot.ini’;"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_addlogin ‘user’, ‘pass’; "));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_droplogin ‘user’;"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC master.dbo.sp_addsrvrolemember ‘user’, ‘sysadmin"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_helpdb master"));
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("EXEC sp_helpdb pubs"));
|
||||
|
||||
|
||||
Assert.assertFalse(WallUtils.isValidateSqlServer("BULK INSERT mydata FROM ‘c:boot.ini’;"));
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user