diff --git a/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java b/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java index 54808551aa..4bef0b0071 100644 --- a/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java +++ b/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java @@ -300,6 +300,7 @@ public class MySqlWallVisitor extends MySqlASTVisitorAdapter implements WallVisi varName = varName.substring(2); } + varName = varName.toLowerCase(); return config.getDenyVariants().contains(varName); } @@ -456,7 +457,7 @@ public class MySqlWallVisitor extends MySqlASTVisitorAdapter implements WallVisi || text.indexOf("or") != -1 // || text.indexOf("and") != -1 // || text.indexOf("union") != -1 // - + || text.indexOf("select") != -1 // || text.indexOf("delete") != -1 // || text.indexOf("insert") != -1 //