package logic import ( "bp.jydev.jianyu360.cn/BaseService/biService/entity" "bp.jydev.jianyu360.cn/BaseService/biService/rpc/internal/svc" "bp.jydev.jianyu360.cn/BaseService/biService/rpc/pb" "bp.jydev.jianyu360.cn/BaseService/biService/service" "context" "encoding/base64" "fmt" "github.com/gogf/gf/v2/util/gconv" "github.com/tjfoc/gmsm/sm4" "github.com/zeromicro/go-zero/core/logx" "regexp" ) type ExportDataByDbLogic struct { ctx context.Context svcCtx *svc.ServiceContext logx.Logger } func NewExportDataByDbLogic(ctx context.Context, svcCtx *svc.ServiceContext) *ExportDataByDbLogic { return &ExportDataByDbLogic{ ctx: ctx, svcCtx: svcCtx, Logger: logx.WithContext(ctx), } } var reg1 = regexp.MustCompile("(?i)(insert|delete|update|master|truncate|declare|exec|alter|use)\\s") var reg2 = regexp.MustCompile("(?i)(select|from)\\s") func (l *ExportDataByDbLogic) ExportDataByDb(in *pb.ExportByDbReq) (*pb.BiReply, error) { if reg1.MatchString(in.Query) && !reg2.MatchString(in.Query) { return &pb.BiReply{ ErrorCode: 1, ErrorMsg: "查询语句不合法", Data: nil, }, nil } if RsaEncrypt([]byte(fmt.Sprintf("%s&%s&%s&%s", gconv.String(in.Content), gconv.String(in.Mails), gconv.String(in.Query), gconv.String(in.Title)))) == in.Token { return &pb.BiReply{ ErrorCode: 1, ErrorMsg: "token验证不通过", Data: nil, }, nil } res := (&service.ExportByDbReq{ Token: in.Token, Title: in.Title, Content: in.Content, Mails: in.Mails, Query: in.Query, Stype: in.Stype, }).ExportDataByDb() return &pb.BiReply{ ErrorCode: 0, ErrorMsg: "", Data: res, }, nil } func RsaEncrypt(data []byte) string { key := []byte(entity.PublicKey) b, _ := sm4.Sm4Ecb(key, data, true) return base64.StdEncoding.EncodeToString(b) }