$_GET['goods_id']+0原理

目的:防止sql注入
例如:’?id=1 or 1’ $_GET[‘id’]+0后值变成1
同时也可以使用(int) intval() (float) floatval()等方法(就是多打了几个字符…)

<!-- 货物分类 table 页面 --> <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Document</title> <link rel="stylesheet" href="../../layui/css/layui.css"> <link rel="stylesheet" href="../../css/diy.css"> </head> <body> <div class="section1"> <!-- 内容主体区域 --> <div class="manu manu-btns" style="padding: 15px;"> <form class="layui-form" action=""> <div class="form-input-box-s layui-form-item"> <div class="input-box"> <label class="layui-form-label">货物分类</label> <div class="layui-input-block block input-i"> <input type="text" name="title" required lay-verify="required" autocomplete="off" class="layui-input"> </div> </div> </div> </form> <div class="buts"> <button type="button" class="layui-btn layui-btn-normal" id="inquire"><span>查询</span></button> <button type="button" class="layui-btn layui-btn-normal" id="reset"><span>重置</span></button> <button type="button" class="layui-btn layui-btn-normal" id="delete" style="display: none"><span>删除</span></button> <button type="button" class="layui-btn layui-btn-normal" target="main_self_frame" id="add" style="display: none"><span>新增</span></button> </div> <div class="Customize-the-box"> <div class="circle"></div> <div class="circle"></div> <div class="card-inner"></div> </div> </div> <div class="table"> <table class="layui-hide" id="classification_of_goods" lay-filter="classification_of_goods"></table> <script type="text/html" id="toolbarDemo"> <div class="layui-btn-container"> {{# if(d.detail_flag){ }} <button class="layui-btn layui-btn-sm" lay-event="detail">详情</button> {{# } }} </div> </script> </div> </div> </body> <script src="../../layui/layui.js"></script> <script src="../../js/index.js"></script> <script src="../../js/base.js"></script> <script src="../../js/axios.min.js"></script> <script> var BaseUrl = baseUrl() layui.use(['element', 'layer', 'laydate', 'util'], function () { var element = layui.element , layer = layui.layer , laydate = layui.laydate , util = layui.util , table = layui.table , $ = layui.$; let personInfo = JSON.parse(sessionStorage.personInfo) let user_group = personInfo.user_group let use_id = personInfo.user_id let url = BaseUrl + '/api/classification_of_goods/get_list?like=0' let deletes = document.querySelector('#delete') let add = document.querySelector('#add') add.addEventListener('click', () => { layopen_add("./view_add.html") }) let sqlwhere let data_data = {size: 10, orderby: 'create_time desc'} let detail_flag = false; // 获取路径权限 async function get_list() { let {data: ren} = await axios.get(BaseUrl + '/api/auth/get_list', { params: { user_group: personInfo.user_group } }) } get_list() // 权限判断 /** * 获取路径对应操作权限 鉴权 * @param {String} action 操作名 */ function $check_action(path1, action = "get") { var o = $get_power(path1); if (o && o[action] != 0 && o[action] != false) { return true; } return false; } if ($check_action('/classification_of_goods/table', 'del') || $check_action('/classification_of_goods/view', 'del')) { deletes.style.display = "block" } if ($check_action('/classification_of_goods/table', 'add') || $check_action('/classification_of_goods/view', 'add')) { add.style.display = "block" } if ($check_action('/classification_of_goods/view', 'get') || $check_action('/classification_of_goods/view', 'set')) { detail_flag = true; } /** * 获取权限 * @param {String} path 路由路径 */ function $get_power(path) { var list_data = JSON.parse(sessionStorage.list_data) var list = list_data; var obj; for (var i = 0; i < list.length; i++) { var o = list[i]; if (o.path === path) { obj = o; break; } } return obj; } var path1 function getpath() { var list_data = JSON.parse(sessionStorage.list_data) for (var i = 0; i < list_data.length; i++) { var o = list_data[i]; if (o.path === "/classification_of_goods/table") { console.log(o.path); path1 = o.path $get_power(o.path) } } } getpath() /** * 注册时是否有显示或操作字段的权限 * @param {String} action 操作名 * @param {String} field <span>查询</span>的字段 * @param {String} path 路径 */ function $check_register_field(action, field, path1) { var o = $get_power(path1); var auth; if (o && o[action] != 0 && o[action] != false) { auth = o["field_" + action]; } if (auth) { return auth.indexOf(field) !== -1; } return false; } /** * 是否有显示或操作字段的权限 * @param {String} action 操作名 * @param {String} field <span>查询</span>的字段 */ function $check_field(action, field, path1) { var o = $get_power(path1); var auth; if (o && o[action] != 0 && o[action] != false) { auth = o["field_" + action]; } if (auth) { return auth.indexOf(field) !== -1; } return false; } /** * 是否有显示或操作支付的权限 * @param {String} path 路径 */ function $check_pay(path) { let o = $get_power(path); if (o){ let option = JSON.parse(o.option); if (option.pay) return true } return false; } /** * 获取路径对应操作权限 鉴权 * @param {String} action 操作名 */ function $check_exam(path1, action = "get") { var o = $get_power(path1); if (o) { var option = JSON.parse(o.option); if (option[action]) return true } return false; } function $check_option(path,op) { var o = $get_power(path); if (o){ var option = JSON.parse(o.option); if (option[op]) return true } return false; } let token = sessionStorage.token || null table.render({ elem: '#classification_of_goods' , toolbar: true , url: url , headers: { 'x-auth-token': token, 'Content-Type': 'application/json' } ,limits: [10] , page: { layout: ['limit', 'count', 'prev', 'page', 'next', 'skip'] //,curr: 5 , groups: 1 , first: false , last: false } , cols: [[ {type: 'checkbox', fixed: 'left'} , { field: 'classification_of_goods', width: 180, title: '货物分类', sort: true } , { field: 'create_time', width : '20%', title : '新增时间', sort : true, templet : "<div>{{layui.util.toDateString(d.create_time, 'yyyy-MM-dd HH:mm:ss')}}</div>" } , { field: 'update_time', width : '20%', title : '更新时间', sort : true, templet : "<div>{{layui.util.toDateString(d.update_time, 'yyyy-MM-dd HH:mm:ss')}}</div>" } , { field: 'operate', title : '操作', sort : true, width : '20%', fixed : 'right', toolbar : "#toolbarDemo" } ]] , done: function (res, curr, count) { // 表格渲染完成之后的回调 if (res.count == null) { // 无数据时直接返回了 return; } if ($check_field('get', 'classification_of_goods', path1)) { // console.log("显示") } else { $("[data-field='classification_of_goods']").css('display', 'none'); } // 重新渲染 } , page: true, request : { limitName: 'size' } , response: { statusName: 'code', //规定返回/Back的状态码字段为code statusCode : 200 //规定成功的状态码为200 } , parseData: function (res) { if ($check_pay('/classification_of_goods/table')) { for (var i = 0; i < res.result.list.length; i++) { res.result.list[i].check_pay = true } } if ($check_action('/classification_of_goods/view', 'set') || $check_action('/classification_of_goods/view', 'get')) { for (var i = 0; i < res.result.list.length; i++) { res.result.list[i].detail_flag = detail_flag } } return { "code": 200, "msg": "", "count": res.result.count, "data": res.result.list } } , where: data_data }) ; table.on('tool(classification_of_goods)', function (obj) { var data = obj.data; if (obj.event === 'detail') { // window.location.href = "./view_add.html?" + data.classification_of_goods_id; layopen_dateil("./view_add.html?" + data.classification_of_goods_id) } }); //下拉框 // 请求参数: let request = { like: 0, size: 10, page: 1, 'classification_of_goods': '', } if (user_group != "管理员") { request['orderby'] = 'create_time desc' if (sqlwhere){ request['sqlwhere'] = sqlwhere } } // <span>重置</span>/Reset参数 let resetName = data_data // 下拉框的<span>重置</span>/Reset参数 let resetSelect = [] //下拉框<span>重置</span>/Reset参数 fun('classification_of_goods', BaseUrl + '/api/classification_of_goods/del', 'classification_of_goods_id', request, resetName, resetSelect ) }) </script> </html> 分析我给的代码,代码对应的功能,不要自己扩写
最新发布
05-28
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值