biService/rpc/internal/logic/exportdatabydblogic.go

package logic

import (
	"bp.jydev.jianyu360.cn/BaseService/biService/entity"
	"bp.jydev.jianyu360.cn/BaseService/biService/rpc/internal/svc"
	"bp.jydev.jianyu360.cn/BaseService/biService/rpc/pb"
	"bp.jydev.jianyu360.cn/BaseService/biService/service"
	"context"
	"encoding/base64"
	"fmt"
	"github.com/gogf/gf/v2/util/gconv"
	"github.com/tjfoc/gmsm/sm4"
	"github.com/zeromicro/go-zero/core/logx"
	"regexp"
)

type ExportDataByDbLogic struct {
	ctx    context.Context
	svcCtx *svc.ServiceContext
	logx.Logger
}

func NewExportDataByDbLogic(ctx context.Context, svcCtx *svc.ServiceContext) *ExportDataByDbLogic {
	return &ExportDataByDbLogic{
		ctx:    ctx,
		svcCtx: svcCtx,
		Logger: logx.WithContext(ctx),
	}
}

var reg1 = regexp.MustCompile("(?i)(insert|delete|update|master|truncate|declare|exec|alter|use)\\s")
var reg2 = regexp.MustCompile("(?i)(select|from)\\s")

func (l *ExportDataByDbLogic) ExportDataByDb(in *pb.ExportByDbReq) (*pb.BiReply, error) {

	if reg1.MatchString(in.Query) && !reg2.MatchString(in.Query) {
		return &pb.BiReply{
			ErrorCode: 1,
			ErrorMsg:  "查询语句不合法",
			Data:      nil,
		}, nil
	}
	if RsaEncrypt([]byte(fmt.Sprintf("%s&%s&%s&%s", gconv.String(in.Content), gconv.String(in.Mails), gconv.String(in.Query), gconv.String(in.Title)))) == in.Token {
		return &pb.BiReply{
			ErrorCode: 1,
			ErrorMsg:  "token验证不通过",
			Data:      nil,
		}, nil
	}
	res := (&service.ExportByDbReq{
		Token:   in.Token,
		Title:   in.Title,
		Content: in.Content,
		Mails:   in.Mails,
		Query:   in.Query,
		Stype:   in.Stype,
	}).ExportDataByDb()
	return &pb.BiReply{
		ErrorCode: 0,
		ErrorMsg:  "",
		Data:      res,
	}, nil
}

func RsaEncrypt(data []byte) string {
	key := []byte(entity.PublicKey)
	b, _ := sm4.Sm4Ecb(key, data, true)
	return base64.StdEncoding.EncodeToString(b)
}