[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

CN109284326A - A kind of data bank access method and device - Google Patents

A kind of data bank access method and device Download PDF

Info

Publication number
CN109284326A
CN109284326A CN201811420392.1A CN201811420392A CN109284326A CN 109284326 A CN109284326 A CN 109284326A CN 201811420392 A CN201811420392 A CN 201811420392A CN 109284326 A CN109284326 A CN 109284326A
Authority
CN
China
Prior art keywords
data
query
query statement
inquiry
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201811420392.1A
Other languages
Chinese (zh)
Inventor
唐人虎
张晓光
杨恺
袁怡然
李丹
胡小燕
张琳利
金琳
杨晋
朱庆荣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Zhongchuang Carbon Investment Technology Co Ltd
Original Assignee
Beijing Zhongchuang Carbon Investment Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Zhongchuang Carbon Investment Technology Co Ltd filed Critical Beijing Zhongchuang Carbon Investment Technology Co Ltd
Priority to CN201811420392.1A priority Critical patent/CN109284326A/en
Publication of CN109284326A publication Critical patent/CN109284326A/en
Pending legal-status Critical Current

Links

Landscapes

  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

This application provides a kind of data bank access method and devices, include the corresponding relationship between data model mark and data specifying-information in the data pattern file this method comprises: constructing data pattern file;Data specifying-information corresponding with target data model mark is inquired in data pattern file according to the target data model mark carried in the data inquiry request received;According to the inquiry content carried in the data specifying-information and data inquiry request inquired, query argument, and assembling query statement are generated;Database is accessed based on the query argument and the query statement.

Description

A kind of data bank access method and device
Technical field
This application involves search technique fields, in particular to a kind of data bank access method and device.
Background technique
Currently, the mode that database is usually JDBC mode is accessed or is read, it is comparatively laborious by way of JDBC, And be easy to introduce injection loophole in SQL statement, greatly increase written in code amount, problem is easily caused to spread.In order to Injection loophole is reduced, Hibernate is defined with XML file to describe model, and it is more complex when defining complexity model, it is accessing When database, where condition is spliced using hql mode, this mode Un-structured can be sayed and easily cause SQL injection loophole. When accessing database using Mybatis and need query portion field, it is necessary to map definition, Java method etc. must be increased newly, also easily Cause SQL injection loophole.
Summary of the invention
In view of this, the application's is designed to provide a kind of data bank access method and device, for solving existing skill The problem of art is easy to produce SQL injection loophole when accessing database.
In a first aspect, the embodiment of the present application provides a kind of data bank access method, this method comprises:
Data pattern file is constructed, includes between data model mark and data specifying-information in the data pattern file Corresponding relationship;
According to the target data model mark carried in the data inquiry request received, in data pattern file, look into Ask data specifying-information corresponding with target data model mark;
According to the inquiry content carried in the data specifying-information and data inquiry request inquired, query argument is generated, And assembling query statement;
Database is accessed based on the query argument and the query statement.
Optionally, the inquiry content carried in the data specifying-information and data inquiry request that the basis inquires, it is raw At query argument, and assembling query statement, comprising:
Filtration parameter is extracted from the filter condition in the inquiry content;
The filtration parameter based on extraction generates query argument;
According to the inquiry field of the data specifying-information and the inquiry content, the query statement is assembled.
Optionally, after the building data pattern file, further includes:
The data pattern file is loaded, the data class that characterize data executes classification is obtained.
It is optionally, described that database is accessed based on the query argument and the query statement, comprising:
The query argument and the query statement are sent to database corresponding with the data class, so that the number Integration processing is carried out to the inquiry odd number and the query statement according to library, and is inquired according to the query statement after integration.
Optionally, the format of the data pattern file includes Json format.
Second aspect, the embodiment of the present application provide a kind of database access device, which includes:
Module is constructed, includes that data model identifies sum number for constructing data pattern file, in the data pattern file According to the corresponding relationship between description information;
First enquiry module, for being identified according to the target data model carried in the data inquiry request received, In data pattern file, data specifying-information corresponding with target data model mark is inquired;
Generation module, for according to the inquiry content carried in the data specifying-information and data inquiry request that inquire, Generate query argument, and assembling query statement;
Second enquiry module for being inquired based on the query argument and the query statement, and obtains inquiry knot Fruit.
Optionally, the generation module is specifically used for:
Filtration parameter is extracted from the filter condition in the inquiry content;
The filtration parameter based on extraction generates query argument;
According to the inquiry field of the data specifying-information and the inquiry content, the query statement is assembled.
Optionally, further includes: loading module, the loading module are used for:
The data pattern file is loaded, the data class that characterize data executes classification is obtained;
Second enquiry module is specifically used for:
The query argument and the query statement are sent to database corresponding with the data class, so that the number Integration processing is carried out to the inquiry odd number and the query statement according to library, and is inquired according to the query statement after integration.
The third aspect, the embodiment of the present application provide a kind of computer equipment and include memory, processor and be stored in institute The computer program that can be run on memory and on the processor is stated, the processor executes real when the computer program The step of existing above method.
Fourth aspect, the embodiment of the present application provide a kind of computer readable storage medium, the computer-readable storage The step of being stored with computer program on medium, the above method executed when the computer program is run by processor.
Data bank access method and device provided by the embodiments of the present application, building include data model mark and data description The data pattern file of corresponding relationship between information, so that the content of data model is easier, intuitive;According to what is inquired The inquiry content carried in data specifying-information and data inquiry request generates query argument, and assembling query statement, is based on Query argument and query statement access database, it is possible to prevente effectively from occurring injection loophole in query statement.
To enable the above objects, features, and advantages of the application to be clearer and more comprehensible, preferred embodiment is cited below particularly, and cooperate Appended attached drawing, is described in detail below.
Detailed description of the invention
Technical solution in ord to more clearly illustrate embodiments of the present application, below will be to needed in the embodiment attached Figure is briefly described, it should be understood that the following drawings illustrates only some embodiments of the application, therefore is not construed as pair The restriction of range for those of ordinary skill in the art without creative efforts, can also be according to this A little attached drawings obtain other relevant attached drawings.
Fig. 1 is a kind of flow diagram for data bank access method that one embodiment of the application provides;
Fig. 2 is a kind of structural schematic diagram for database access device that one embodiment of the application provides;
Fig. 3 is a kind of structural schematic diagram for calculating equipment provided by the embodiments of the present application.
Specific embodiment
To keep the purposes, technical schemes and advantages of the embodiment of the present application clearer, below in conjunction with the embodiment of the present application Middle attached drawing, the technical scheme in the embodiment of the application is clearly and completely described, it is clear that described embodiment is only It is some embodiments of the present application, instead of all the embodiments.The application being usually described and illustrated herein in the accompanying drawings is real The component for applying example can be arranged and be designed with a variety of different configurations.Therefore, below to the application's provided in the accompanying drawings The detailed description of embodiment is not intended to limit claimed scope of the present application, but is merely representative of the selected reality of the application Apply example.Based on embodiments herein, those skilled in the art institute obtained without making creative work There are other embodiments, shall fall in the protection scope of this application.
The embodiment of the present application provides a kind of data bank access method, as shown in Figure 1, method includes the following steps:
S101, constructs data pattern file, includes data model mark and data description letter in the data pattern file Corresponding relationship between breath;
Here, data pattern file can be Model structure, and the format of data pattern file can be but not limited to Json Format etc., both succinct or lamps structure;In addition to including data model mark and the description of corresponding data in data pattern file It further include sort field, sortord, associated tables of data etc. outside information, each corresponding multiple data of data model mark are retouched State information, data specifying-information includes that the data model identifies corresponding database information, and in the database it is associated Data table information, wherein database information can be Database Identification, e.g., and database-name, database accession number etc., tables of data Information can identify for tables of data, e.g., data table name, data table numbering etc.;Data model mark can be data model name Claim, for example, can be ModelA, ModelB etc..In practical applications, data pattern file is usually according to data query requirements Building, data query requirements are generally pre-set according to actual needs.
Model structure is described as follows using Json format:
It defines dbModelName and describes model title;
It defines dbTableStr and describes the main table information of model;
It defines joinConditionStr and describes table incidence relation;
Define the sort field of defaultOrderByStr description default;
Define the sortord of defaultOrderbyRule description default;
Define ViewModelColumnInfoStr descriptive data base column and referenced column mapping relations.
It is illustrated by taking ModelA as an example:
S102 is identified according to the target data model carried in the data inquiry request received, in data pattern file In, inquire data specifying-information corresponding with target data model mark;
Here, target data model mark and inquiry content can be carried in data inquiry request, inquiry content can be with Including inquiring field and filter condition etc., what inquiry field and filter condition were generally arranged according to user demand.
In specific implementation, after receiving target data model mark, in data pattern file, determining and number of targets It, will if inquiring target data model identifies matched data model mark according to the matched data model mark of model identification And determining data model identifies corresponding data specifying-information as data corresponding with target data model mark and describes to believe Breath, that is, the data specifying-information inquired.
For example, continuing the example in step S101, partial parameters can be referred to following in data inquiry request:
Model mark:
DbModelName=" dbModelNameA "
Inquire field:
{SelectConditionObject:[{
columnName:"BAO_GAO_ID",isCustomedColumn:"false",alias:"BAO_ GAO_ID"
}]}
Filter condition:
{whereConditionObjectList:[{
ColumnName: " BAO_GAO_ID ", operator: "=", expression:[1]
}]}
According to the ModelA in data inquiry request, description information corresponding with ModelA in data pattern file is inquired (with reference to the example in S101).
S103 generates inquiry according to the inquiry content carried in the data specifying-information and data inquiry request inquired Parameter, and assembling query statement;
Here, query argument is generally based on what the filter condition carried in data inquiry request generated;Query statement one As be query sentence of database, for example, SQL statement;Assemble query statement mode can there are many, the prior art is existing detailed Introduction, no longer excessively illustrated herein.
According to the inquiry content carried in the data specifying-information and data inquiry request inquired, inquiry ginseng is generated Number, and when assembling query statement, comprising the following steps:
Filtration parameter is extracted from the filter condition in the inquiry content;
The filtration parameter based on extraction generates query argument;
According to the inquiry field of the data specifying-information and the inquiry content, the query statement is assembled.
In specific implementation, extract filter condition in character corresponding with data model mark, using the character of extraction as Filtration parameter can also be handled filtration parameter based on actual demand using the filtration parameter as query argument, will Treated filtration parameter is as query argument;According to corresponding data model in data model mark and data specifying-information The data table information of mark, assembling generate query statement.
The character that the query statement that the prior art generates corresponds to Model title is generally the filtration parameter in filter condition, In this way, obtained query statement is as follows when query statement to be transferred to the execution module of bottom:
selectb.BAO_GAO_ID from BAO_GAO_XIN_XI b left join QI_YE_XIN_XI d on B.QI_YE_XU_HAO=d.QI_YE_BIAN_HAO where b.BAO_GAO_ID=1or 1=1
B.BAO_GAO_ID should be 1 in practical application, and still, the b.BAO_GAO_ID in the query statement of generation is " 1or 1=1 " generates injection loophole.And in this application, the character of corresponding data model identification is setting word in query statement Symbol, for example, "? ", the query statement for carrying setting character is transferred to the execution module of bottom, it can be to avoid the production of injection loophole It is raw.
For example, continuing the example in S102, character corresponding with data model mark is 1 in filter condition, by the 1 of extraction As filtration parameter, which is transferred to the execution module of bottom, according to the b.BAO_GAO_ in data specifying-information ID, BAO_GAO_XIN_XI b left join QI_YE_XIN_XI d on b.QI_YE_XU_HAO=d.QI_YE_BIAN_ HAO, assembling obtain query statement, and obtained query statement (SQL statement) is as follows:
selectb.BAO_GAO_ID from BAO_GAO_XIN_XI b left join QI_YE_XIN_XI d on B.QI_YE_XU_HAO=d.QI_YE_BIAN_HAO where b.BAO_GAO_ID=?
S104 accesses database based on the query argument and the query statement.
After constructing data pattern file, further includes:
The data pattern file is loaded, the data class that characterize data executes classification is obtained.
In specific implementation, if the calculating equipment for executing data bank access method connects data by hibernate mode Library, then obtained data class is hibernate class;If the calculating equipment for executing data bank access method passes through the side mybatis Formula connects database, then, obtained data class is mybatis class;If the calculating equipment for executing data bank access method passes through JDBC mode connects database, then, obtained data class is JDBC class.Wherein, the connection type of equipment and database is calculated There are many general, identical database can be accessed by different connection types by calculating equipment, can also pass through different companies The mode of connecing accesses different databases, can determines according to actual conditions, the application to this not with limitation.
Database is being accessed based on the query argument and the query statement, comprising the following steps:
The query argument and the query statement are sent to database corresponding with the data class, so that the number Integration processing is carried out to the inquiry odd number and the query statement according to library, and is inquired according to the query statement after integration.
In specific implementation, it calculates equipment and query argument and query statement is sent into database, database will see inquiry language Setting symbol in sentence is updated to query argument, inquires database based on the query statement after obtained integration.
For example, continuing the example in step S103, after database receives query argument (e.g., 1) and query statement, can incite somebody to action In the above-mentioned query statement of query argument (e.g., 1) substitution "? ", it is as follows to obtain updated query statement:
selectb.BAO_GAO_ID from BAO_GAO_XIN_XI b left join QI_YE_XIN_XI d on B.QI_YE_XU_HAO=d.QI_YE_BIAN_HAO where b.BAO_GAO_ID=1
Tables of data is inquired based on above-mentioned updated query statement, and obtained query result is returned into user.
The embodiment of the present application provides a kind of database access device, as shown in Fig. 2,
Construct module 21, include for constructing data pattern file, in the data pattern file data model mark and Corresponding relationship between data specifying-information;
First enquiry module 22, for being identified according to the target data model carried in the data inquiry request received, In data pattern file, data specifying-information corresponding with target data model mark is inquired;
Generation module 23, for according in the inquiry carried in the data specifying-information and data inquiry request inquired Hold, generates query argument, and assembling query statement;
Second enquiry module 24 for being inquired based on the query argument and the query statement, and is inquired As a result.
Optionally, the generation module 25 is specifically used for:
Filtration parameter is extracted from the filter condition in the inquiry content;
The filtration parameter based on extraction generates query argument;
According to the inquiry field of the data specifying-information and the inquiry content, the query statement is assembled.
Optionally, further includes: loading module 26, the loading module 26 are used for:
The data pattern file is loaded, the data class that characterize data executes classification is obtained;
Second enquiry module 24 is specifically used for:
The query argument and the query statement are sent to database corresponding with the data class, so that the number Integration processing is carried out to the inquiry odd number and the query statement according to library, and is inquired according to the query statement after integration.
Optionally, the format of the data pattern file includes Json format.
Corresponding to the data bank access method in Fig. 1, the embodiment of the invention also provides a kind of computer equipments, such as Fig. 3 Shown, which includes memory 1000, processor 2000 and is stored on the memory 1000 and can be in the processor 2000 The computer program of upper operation, wherein above-mentioned processor 2000 realizes above-mentioned database access when executing above-mentioned computer program The step of method.
Specifically, above-mentioned memory 1000 and processor 2000 can be general memory and processor, not do here It is specific to limit, when the computer program of 2000 run memory 1000 of processor storage, it is able to carry out above-mentioned database access Method, for avoiding the problem that the prior art generates injection loophole when accessing database, the application building includes data model The data pattern file of corresponding relationship between mark and data specifying-information, so that the content of data model is easier, straight It sees;According to according to the inquiry content carried in the data specifying-information and data inquiry request inquired, query argument is generated, with And assembling query statement, database is accessed based on query argument and query statement, it is possible to prevente effectively from infusing in query statement Enter loophole.
Corresponding to the data bank access method in Fig. 1, the embodiment of the present application also provides a kind of computer-readable storage mediums Matter is stored with computer program on the computer readable storage medium, which executes above-mentioned when being run by processor The step of data bank access method.
Specifically, which can be general storage medium, such as mobile disk, hard disk, on the storage medium Computer program when being run, above-mentioned data bank access method is able to carry out, for avoiding the prior art in access database When lead to the problem of injection loophole, the application building includes the corresponding relationship between data model mark and data specifying-information Data pattern file, so that the content of data model is easier, intuitive;According to the data specifying-information sum number inquired it is investigated that The inquiry content carried in request is ask, query argument, and assembling query statement is generated, is visited based on query argument and query statement Database is asked, it is possible to prevente effectively from occurring injection loophole in query statement.
In embodiment provided herein, it should be understood that disclosed device and method, it can be by others side Formula is realized.The apparatus embodiments described above are merely exemplary, for example, the division of the unit, only one kind are patrolled Function division is collected, there may be another division manner in actual implementation, in another example, multiple units or components can combine or can To be integrated into another system, or some features can be ignored or not executed.Another point, shown or discussed is mutual Coupling, direct-coupling or communication connection can be INDIRECT COUPLING or communication link by some communication interfaces, device or unit It connects, can be electrical property, mechanical or other forms.
The unit as illustrated by the separation member may or may not be physically separated, aobvious as unit The component shown may or may not be physical unit, it can and it is in one place, or may be distributed over multiple In network unit.It can select some or all of unit therein according to the actual needs to realize the mesh of this embodiment scheme 's.
In addition, each functional unit in embodiment provided by the present application can integrate in one processing unit, it can also To be that each unit physically exists alone, can also be integrated in one unit with two or more units.
It, can be with if the function is realized in the form of SFU software functional unit and when sold or used as an independent product It is stored in a computer readable storage medium.Based on this understanding, the technical solution of the application is substantially in other words The part of the part that contributes to existing technology or the technical solution can be embodied in the form of software products, the meter Calculation machine software product is stored in a storage medium, including some instructions are used so that a computer equipment (can be a People's computer, server or network equipment etc.) execute each embodiment the method for the application all or part of the steps. And storage medium above-mentioned includes: that USB flash disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), arbitrary access are deposited The various media that can store program code such as reservoir (RAM, Random Access Memory), magnetic or disk.
It should also be noted that similar label and letter indicate similar terms in following attached drawing, therefore, once a certain Xiang Yi It is defined in a attached drawing, does not then need that it is further defined and explained in subsequent attached drawing, in addition, term " the One ", " second ", " third " etc. are only used for distinguishing description, are not understood to indicate or imply relative importance.
Finally, it should be noted that embodiment described above, the only specific embodiment of the application, to illustrate the application Technical solution, rather than its limitations, the protection scope of the application is not limited thereto, although with reference to the foregoing embodiments to this Shen It please be described in detail, those skilled in the art should understand that: anyone skilled in the art Within the technical scope of the present application, it can still modify to technical solution documented by previous embodiment or can be light It is readily conceivable that variation or equivalent replacement of some of the technical features;And these modifications, variation or replacement, do not make The essence of corresponding technical solution is detached from the spirit and scope of the embodiment of the present application technical solution.The protection in the application should all be covered Within the scope of.Therefore, the protection scope of the application shall be subject to the protection scope of the claim.

Claims (10)

1. a kind of data bank access method, which is characterized in that this method comprises:
Data pattern file is constructed, includes pair between data model mark and data specifying-information in the data pattern file It should be related to;
According to carried in the data inquiry request received target data model mark, in data pattern file, inquiry with Target data model identifies corresponding data specifying-information;
According to the inquiry content carried in the data specifying-information and data inquiry request inquired, query argument is generated, and Assemble query statement;
Database is accessed based on the query argument and the query statement.
2. the method as described in claim 1, which is characterized in that the data specifying-information and data query that the basis inquires The inquiry content carried in request generates query argument, and assembling query statement, comprising:
Filtration parameter is extracted from the filter condition in the inquiry content;
The filtration parameter based on extraction generates query argument;
According to the inquiry field of the data specifying-information and the inquiry content, the query statement is assembled.
3. the method as described in claim 1, which is characterized in that after the building data pattern file, further includes:
The data pattern file is loaded, the data class that characterize data executes classification is obtained.
4. method as claimed in claim 3, which is characterized in that described to be accessed based on the query argument and the query statement Database, comprising:
The query argument and the query statement are sent to database corresponding with the data class, so that the database Integration processing is carried out to the inquiry odd number and the query statement, and is inquired according to the query statement after integration.
5. the method as described in claim 1, which is characterized in that the format of the data pattern file includes Json format.
6. a kind of database access device, which is characterized in that the device includes:
Module is constructed, includes that data model mark and data are retouched for constructing data pattern file, in the data pattern file State the corresponding relationship between information;
First enquiry module, for being identified according to the target data model carried in the data inquiry request received, in data In model file, data specifying-information corresponding with target data model mark is inquired;
Generation module, for generating according to the inquiry content carried in the data specifying-information and data inquiry request inquired Query argument, and assembling query statement;
Second enquiry module for being inquired based on the query argument and the query statement, and obtains query result.
7. device as claimed in claim 6, which is characterized in that the generation module is specifically used for:
Filtration parameter is extracted from the filter condition in the inquiry content;
The filtration parameter based on extraction generates query argument;
According to the inquiry field of the data specifying-information and the inquiry content, the query statement is assembled.
8. device as claimed in claim 6, which is characterized in that further include: loading module, the loading module are used for:
The data pattern file is loaded, the data class that characterize data executes classification is obtained;
Second enquiry module is specifically used for:
The query argument and the query statement are sent to database corresponding with the data class, so that the database Integration processing is carried out to the inquiry odd number and the query statement, and is inquired according to the query statement after integration.
9. a kind of computer equipment includes memory, processor and is stored on the memory and can transport on the processor Capable computer program, which is characterized in that the processor realizes the claims 1 to 5 when executing the computer program The step of described in any item methods.
10. a kind of computer readable storage medium, computer program, feature are stored on the computer readable storage medium The step of being, the described in any item methods of the claims 1 to 5 executed when the computer program is run by processor.
CN201811420392.1A 2018-11-26 2018-11-26 A kind of data bank access method and device Pending CN109284326A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811420392.1A CN109284326A (en) 2018-11-26 2018-11-26 A kind of data bank access method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811420392.1A CN109284326A (en) 2018-11-26 2018-11-26 A kind of data bank access method and device

Publications (1)

Publication Number Publication Date
CN109284326A true CN109284326A (en) 2019-01-29

Family

ID=65172761

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811420392.1A Pending CN109284326A (en) 2018-11-26 2018-11-26 A kind of data bank access method and device

Country Status (1)

Country Link
CN (1) CN109284326A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110472750A (en) * 2019-07-05 2019-11-19 深圳市轱辘汽车维修技术有限公司 Method, apparatus, server and the medium of enquiry circuit figure
CN111309991A (en) * 2020-01-16 2020-06-19 广州三七互娱科技有限公司 Query statement generation method and device and data query method and system
CN112084167A (en) * 2019-06-14 2020-12-15 北京沃东天骏信息技术有限公司 Authority filtering method and device and storage medium
CN112685443A (en) * 2021-01-12 2021-04-20 树根互联技术有限公司 Data query method and device, electronic equipment and computer readable storage medium
CN112883048A (en) * 2019-11-29 2021-06-01 阿里巴巴集团控股有限公司 Data access method, device, server and readable storage medium
CN113704284A (en) * 2021-08-27 2021-11-26 北京房江湖科技有限公司 Method and device for querying data based on data model
CN113760863A (en) * 2021-01-22 2021-12-07 北京沃东天骏信息技术有限公司 Database configuration method and device, computer equipment and readable storage medium
CN114661830A (en) * 2022-03-09 2022-06-24 苏州工业大数据创新中心有限公司 Data processing method, device, terminal and storage medium

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101312393A (en) * 2007-05-24 2008-11-26 北京启明星辰信息技术有限公司 Detection method and system for SQL injection loophole
CN107016001A (en) * 2016-01-28 2017-08-04 阿里巴巴集团控股有限公司 A kind of data query method and device

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101312393A (en) * 2007-05-24 2008-11-26 北京启明星辰信息技术有限公司 Detection method and system for SQL injection loophole
CN107016001A (en) * 2016-01-28 2017-08-04 阿里巴巴集团控股有限公司 A kind of data query method and device

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
@一个人00的寂寞: ""如何防范SQL注入漏洞"", 《百度文库》 *
余天升: ""如何从根本上防止SQL注入?"", 《知乎》 *

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112084167A (en) * 2019-06-14 2020-12-15 北京沃东天骏信息技术有限公司 Authority filtering method and device and storage medium
CN110472750A (en) * 2019-07-05 2019-11-19 深圳市轱辘汽车维修技术有限公司 Method, apparatus, server and the medium of enquiry circuit figure
CN112883048A (en) * 2019-11-29 2021-06-01 阿里巴巴集团控股有限公司 Data access method, device, server and readable storage medium
CN112883048B (en) * 2019-11-29 2024-06-04 阿里巴巴集团控股有限公司 Data access method, device, server and readable storage medium
CN111309991A (en) * 2020-01-16 2020-06-19 广州三七互娱科技有限公司 Query statement generation method and device and data query method and system
CN111309991B (en) * 2020-01-16 2023-03-31 广州三七互娱科技有限公司 Query statement generation method and device and data query method and system
CN112685443A (en) * 2021-01-12 2021-04-20 树根互联技术有限公司 Data query method and device, electronic equipment and computer readable storage medium
CN112685443B (en) * 2021-01-12 2023-11-10 树根互联股份有限公司 Data query method, device, electronic equipment and computer readable storage medium
CN113760863A (en) * 2021-01-22 2021-12-07 北京沃东天骏信息技术有限公司 Database configuration method and device, computer equipment and readable storage medium
CN113704284A (en) * 2021-08-27 2021-11-26 北京房江湖科技有限公司 Method and device for querying data based on data model
CN114661830A (en) * 2022-03-09 2022-06-24 苏州工业大数据创新中心有限公司 Data processing method, device, terminal and storage medium

Similar Documents

Publication Publication Date Title
CN109284326A (en) A kind of data bank access method and device
JP5721818B2 (en) Use of model information group in search
CN110019540B (en) Implementation method, display method, device and equipment of enterprise atlas
US10546348B1 (en) Cleaning noise words from transaction descriptions
CN109947998A (en) The calculating data lineage of network across heterogeneous system
US20150378721A1 (en) Methods for managing applications using semantic modeling and tagging and devices thereof
CN107451109A (en) Report form generation method and system
KR20150042866A (en) Mapping instances of a dataset within a data management system
CN103970761A (en) Commodity data searching method and device
CN109905293A (en) A kind of terminal device recognition methods, system and storage medium
CN104750776B (en) Use the information content in metadata access database platform
CN109408513A (en) Data processing method, system and storage medium
CN109284323A (en) The management method and device of detection data
US20170060977A1 (en) Data preparation for data mining
CN107480268A (en) Data query method and device
CN117473941B (en) Drawing processing method and device, electronic equipment and storage medium
CN110704486A (en) Data processing method, device, system, storage medium and server
CN112800197A (en) Method and device for determining target fault information
CN110399368A (en) A kind of data manipulation method and device
US11531706B2 (en) Graph search using index vertices
CN105302556A (en) Calculation realization method and system and server apparatus
CN106464723A (en) Native application content verification
CN108959294A (en) A kind of method and apparatus accessing search engine
CN105930354A (en) Storage model conversion method and device
CN110009796A (en) Invoice category recognition methods, device, electronic equipment and readable storage medium storing program for executing

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20190129