StringEscape.java 2.54 KB
   1
   2
   3
   4
   5
   6
   7
   8
   9
  10
  11
  12
  13
  14
  15
  16
  17
  18
  19
  20
  21
  22
  23
  24
  25
  26
  27
  28
  29
  30
  31
  32
  33
  34
  35
  36
  37
  38
  39
  40
  41
  42
  43
  44
  45
  46
  47
  48
  49
  50
  51
  52
  53
  54
  55
  56
  57
  58
  59
  60
  61
  62
  63
  64
  65
  66
  67
  68
  69
  70
  71
  72
  73
  74
  75
  76
  77
  78
  79
  80
  81
  82
  83
  84
  85
  86
  87
  88
  89
  90
  91
  92
  93
  94
  95
  96
  97
  98
  99
 100
 101
 102
 103
 104
 105
 106
 107
 108
 109
 110
 111
 112
 113
 114
 115
 116
 117
 118
 119
 120
 121
 122
 123
 124
 125
 126
 127
 128
 129
 130
 131
 132
 133
 134
 135
 136
 137
 138
 139
 140
 141
 142
 143
 144
 145
 146
 147
package com.baomidou.mybatisplus.toolkit;

/**
* <p>
* StringEscape ,数据库字符串转义
* </p>
*
* @author Caratacus
* @Date 2016-10-16
*/
public class StringEscape {
/**
* 字符串是否需要转义
*
* @param str
* @param len
* @return
*/
private static boolean isEscapeNeededForString(String str, int len) {

boolean needsHexEscape = false;

for (int i = 0; i < len; ++i) {
char c = str.charAt(i);

switch (c) {
case 0: /* Must be escaped for 'mysql' */

needsHexEscape = true;
break;

case '\n': /* Must be escaped for logs */
needsHexEscape = true;

break;

case '\r':
needsHexEscape = true;
break;

case '\\':
needsHexEscape = true;

break;

case '\'':
needsHexEscape = true;

break;

case '"': /* Better safe than sorry */
needsHexEscape = true;

break;

case '\032': /* This gives problems on Win32 */
needsHexEscape = true;
break;
}

if (needsHexEscape) {
break; // no need to scan more
}
}
return needsHexEscape;
}

/**
* 转义字符串
*
* @param escapeStr
* @return
*/
public static String escapeString(String escapeStr) {

if (escapeStr.matches("\'(.+)\'")) {
escapeStr = escapeStr.substring(1, escapeStr.length() - 1);
}

String parameterAsString = escapeStr;
int stringLength = escapeStr.length();
if (isEscapeNeededForString(escapeStr, stringLength)) {

StringBuilder buf = new StringBuilder((int) (escapeStr.length() * 1.1));

//
// Note: buf.append(char) is _faster_ than appending in blocks,
// because the block append requires a System.arraycopy().... go
// figure...
//

for (int i = 0; i < stringLength; ++i) {
char c = escapeStr.charAt(i);

switch (c) {
case 0: /* Must be escaped for 'mysql' */
buf.append('\\');
buf.append('0');

break;

case '\n': /* Must be escaped for logs */
buf.append('\\');
buf.append('n');

break;

case '\r':
buf.append('\\');
buf.append('r');

break;

case '\\':
buf.append('\\');
buf.append('\\');

break;

case '\'':
buf.append('\\');
buf.append('\'');

break;

case '"': /* Better safe than sorry */
buf.append('\\');
buf.append('"');

break;

case '\032': /* This gives problems on Win32 */
buf.append('\\');
buf.append('Z');

break;

default:
buf.append(c);
}
}

parameterAsString = buf.toString();
}
return "\'" + parameterAsString + "\'";
}
}