unico 2004/11/22 05:41:30
Modified: src/stores/org/apache/slide/store/impl/rdbms/expression
RDBMSPropContainsExpression.java
RDBMSNotPropContainsExpression.java
Log:
escape SQL wildcard characters in LIKE expressions
Revision Changes Path
1.4 +18 -4
jakarta-slide/src/stores/org/apache/slide/store/impl/rdbms/expression/RDBMSPropContainsExpression.java
Index: RDBMSPropContainsExpression.java
===================================================================
RCS file:
/home/cvs/jakarta-slide/src/stores/org/apache/slide/store/impl/rdbms/expression/RDBMSPropContainsExpression.java,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- RDBMSPropContainsExpression.java 1 Nov 2004 11:01:45 -0000 1.3
+++ RDBMSPropContainsExpression.java 22 Nov 2004 13:41:30 -0000 1.4
@@ -39,6 +39,20 @@
Element literal = _element.getChild(Literals.LITERAL,
NamespaceCache.DEFAULT_NAMESPACE);
return "(p" + _tableIndex + ".PROPERTY_NAME = '" +
property.getName() + "' AND " +
"p" + _tableIndex + ".PROPERTY_NAMESPACE = '" +
property.getNamespaceURI() + "' AND " +
- "p" + _tableIndex + ".PROPERTY_VALUE LIKE '%" +
literal.getTextNormalize() + "%')";
+ "p" + _tableIndex + ".PROPERTY_VALUE LIKE '%" +
getPropertyValue(literal) + "%')";
}
+
+ private String getPropertyValue(Element literal) {
+ String value = literal.getTextNormalize();
+ StringBuffer sb = new StringBuffer(value.length() + 10);
+ for (int i = 0, l = value.length(); i < l; i++) {
+ char c = value.charAt(i);
+ if (c == '_' || c == '%') {
+ sb.append("\\\\");
+ }
+ sb.append(c);
+ }
+ return sb.toString();
+ }
+
}
1.4 +18 -4
jakarta-slide/src/stores/org/apache/slide/store/impl/rdbms/expression/RDBMSNotPropContainsExpression.java
Index: RDBMSNotPropContainsExpression.java
===================================================================
RCS file:
/home/cvs/jakarta-slide/src/stores/org/apache/slide/store/impl/rdbms/expression/RDBMSNotPropContainsExpression.java,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- RDBMSNotPropContainsExpression.java 1 Nov 2004 11:01:45 -0000
1.3
+++ RDBMSNotPropContainsExpression.java 22 Nov 2004 13:41:30 -0000
1.4
@@ -39,6 +39,20 @@
Element literal = _element.getChild(Literals.LITERAL,
NamespaceCache.DEFAULT_NAMESPACE);
return "NOT (p" + _tableIndex + ".PROPERTY_NAME = '" +
property.getName() + "' AND " +
"p" + _tableIndex + ".PROPERTY_NAMESPACE = '" +
property.getNamespaceURI() + "' AND " +
- "p" + _tableIndex + ".PROPERTY_VALUE LIKE '%" +
literal.getTextNormalize() + "%')";
+ "p" + _tableIndex + ".PROPERTY_VALUE LIKE '%" +
getPropertyValue(literal) + "%')";
}
+
+ private String getPropertyValue(Element literal) {
+ String value = literal.getTextNormalize();
+ StringBuffer sb = new StringBuffer(value.length() + 10);
+ for (int i = 0, l = value.length(); i < l; i++) {
+ char c = value.charAt(i);
+ if (c == '_' || c == '%') {
+ sb.append("\\\\");
+ }
+ sb.append(c);
+ }
+ return sb.toString();
+ }
+
}
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
