java- 分页-参数模型


/**
* 查询参数
*
*/
public class Query extends LinkedHashMap<String, Object> {
//当前页码
private int page;
//每页条数
private int limit;

public Query(Map<String, Object> params){
this.putAll(params);

//分页参数
this.page = Integer.parseInt(params.get("page").toString());
this.limit = Integer.parseInt(params.get("limit").toString());
this.put("offset", (page - 1) * limit);
this.put("page", page);
this.put("limit", limit);

//防止SQL注入(因为sidx、order是通过拼接SQL实现排序的,会有SQL注入风险)
String sidx = (String)params.get("sidx");
String order = (String)params.get("order");
if(StringUtils.isNotBlank(sidx)){
this.put("sidx", SQLFilter.sqlInject(sidx));
}
if(StringUtils.isNotBlank(order)){
this.put("order", SQLFilter.sqlInject(order));
}

}
}

猜你喜欢

转载自www.cnblogs.com/wen-/p/12449923.html