From e4c62f91b09ec2e6689a165e670f6387260dfb89 Mon Sep 17 00:00:00 2001 From: kiki Date: Wed, 28 Aug 2013 17:47:16 +0800 Subject: [PATCH] fix deny variants bug --- src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java b/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java index 54808551aa..4bef0b0071 100644 --- a/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java +++ b/src/main/java/com/alibaba/druid/wall/spi/MySqlWallVisitor.java @@ -300,6 +300,7 @@ public class MySqlWallVisitor extends MySqlASTVisitorAdapter implements WallVisi varName = varName.substring(2); } + varName = varName.toLowerCase(); return config.getDenyVariants().contains(varName); } @@ -456,7 +457,7 @@ public class MySqlWallVisitor extends MySqlASTVisitorAdapter implements WallVisi || text.indexOf("or") != -1 // || text.indexOf("and") != -1 // || text.indexOf("union") != -1 // - + || text.indexOf("select") != -1 // || text.indexOf("delete") != -1 // || text.indexOf("insert") != -1 //