jfinal出现sql injection violation, multi-statement not allow : select count(*) select a.name,

场景：public Page<Record> getPage（int pnum,int psize,String flag）{

String sql = "select * from a where a.flag="+flag;

return Db.paginate(pnum, psize,"select * ",sql);

}

 

解决方案：

public Page<Record> getPage（int pnum,int psize,String flag）{

String sql = "from a where a.flag="+flag;

return Db.paginate(pnum, psize,"select * ",sql);

}

 

检查发现，select * 写了两次，去掉一处即可。