search

youseries / ureport

UReport2 is a high-performance pure Java report engine based on Spring architecture, where complex Chinese-style statements and reports can be prepared by iterating over cells.
Apache License 2.0
2.05k stars 836 forks source link

貌似不能使用大于号 #538

Open webusi-dms opened 3 years ago

webusi-dms commented 3 years ago

为了您的问题能得到及时准确解答，请认真填写下面各个选项，感谢您的配合。

select * from td_client where id > :id

服务端错误：You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '10' at line 1

LSL1618 commented 3 years ago

是不是数据类型没对上导致无法比大小？

jiangru721 commented 3 years ago

是不是:id需要用括号括起来？

nail2008 commented 3 years ago

@zhangzhonghua 检查一下你的应用是不是有xss过滤的功能，你需要将你的ureport查询请求加入例外。否则你的大于号会被转义为gt，语句自然就报错了。