mirror of
https://github.com/documize/community.git
synced 2025-07-19 05:09:42 +02:00
50 lines
1.8 KiB
Go
50 lines
1.8 KiB
Go
// Copyright 2016 Documize Inc. <legal@documize.com>. All rights reserved.
|
|
//
|
|
// This software (Documize Community Edition) is licensed under
|
|
// GNU AGPL v3 http://www.gnu.org/licenses/agpl-3.0.en.html
|
|
//
|
|
// You can operate outside the AGPL restrictions by purchasing
|
|
// Documize Enterprise Edition and obtaining a commercial license
|
|
// by contacting <sales@documize.com>.
|
|
//
|
|
// https://documize.com
|
|
|
|
package stringutil
|
|
|
|
import (
|
|
"strings"
|
|
)
|
|
|
|
// CleanDBValue returns like query minus dodgy characters.
|
|
func CleanDBValue(filter string) string {
|
|
filter = strings.ReplaceAll(filter, " ", "")
|
|
filter = strings.ReplaceAll(filter, " ' ", "")
|
|
filter = strings.ReplaceAll(filter, "'", "")
|
|
filter = strings.ReplaceAll(filter, " ` ", "")
|
|
filter = strings.ReplaceAll(filter, "`", "")
|
|
filter = strings.ReplaceAll(filter, " \" ", "")
|
|
filter = strings.ReplaceAll(filter, "\"", "")
|
|
filter = strings.ReplaceAll(filter, " -- ", "")
|
|
filter = strings.ReplaceAll(filter, "--", "")
|
|
filter = strings.ReplaceAll(filter, ";", "")
|
|
filter = strings.ReplaceAll(filter, ":", "")
|
|
filter = strings.ReplaceAll(filter, "~", "")
|
|
filter = strings.ReplaceAll(filter, "!", "")
|
|
filter = strings.ReplaceAll(filter, "#", "")
|
|
filter = strings.ReplaceAll(filter, "%", "")
|
|
filter = strings.ReplaceAll(filter, "*", "")
|
|
filter = strings.ReplaceAll(filter, "\\", "")
|
|
filter = strings.ReplaceAll(filter, "/", "")
|
|
filter = strings.ReplaceAll(filter, "union select", "")
|
|
filter = strings.ReplaceAll(filter, "UNION SELECT", "")
|
|
filter = strings.ReplaceAll(filter, " from ", "")
|
|
filter = strings.ReplaceAll(filter, " FROM ", "")
|
|
filter = strings.ReplaceAll(filter, " OR 1=1 ", "")
|
|
filter = strings.ReplaceAll(filter, " OR 1=1 ", "")
|
|
filter = strings.ReplaceAll(filter, " = ", "")
|
|
filter = strings.ReplaceAll(filter, "=", "")
|
|
|
|
filter = strings.TrimSpace(filter)
|
|
|
|
return filter
|
|
}
|