/*
* Copyright 1999-2017 Alibaba Group Holding Ltd.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.alibaba.druid.bvt.filter.wall.mysql;
import junit.framework.TestCase;
import org.junit.Assert;
import com.alibaba.druid.wall.WallProvider;
import com.alibaba.druid.wall.spi.MySqlWallProvider;
/**
* SQLServerWallTest
*
* @author RaymondXiu
* @version 1.0, 2012-3-18
* @see
*/
public class MySqlWallTest62 extends TestCase {
public void test_true() throws Exception {
WallProvider provider = new MySqlWallProvider();
provider.getConfig().setSchemaCheck(true);
Assert.assertTrue(provider.checkValid(//
"select temp.*, u.CanComment, u.CanBeShared, u.CanForward, COALESCE(b.UserID,0) as isBlocked" + //
" , COALESCE(f.UserID,0) as Followed, COALESCE(ff.UserID,0) as IsFollowed" + //
" , COALESCE(ul.UserID,0) as liked, COALESCE(fff.UserID,0) as RIsFollowed " + //
"from (select 294765 as UserID, 0 as RUserID, 7785977 as PicID " + //
" union all select 294765 as UserID, 0 as RUserID, 7780341 as PicID) temp " + //
"left join Users as u on u.UserID = temp.UserID " + //
"left join BlockUser as b on b.UserID = temp.UserID and b.BlockUserID = 294765 " + //
"left join Fans as f on f.FansID = temp.UserID and f.UserID = 294765 " + //
"left join Fans as ff ON ff.FansID = 294765 and ff.UserID = temp.UserID " + //
"left join Fans as fff ON fff.FansID = 294765 and fff.UserID = temp.RUserID " + //
"left join UserLikes as ul on ul.PicID = temp.PicID and ul.UserID = 294765"));
Assert.assertEquals(4, provider.getTableStats().size());
}
public void test_false() throws Exception {
WallProvider provider = new MySqlWallProvider();
provider.getConfig().setSchemaCheck(true);
provider.getConfig().setSelectUnionCheck(true);
String sql = "SELECT 1, 2, 3" + //
" UNION ALL SELECT a from tt where c=1" + //
" UNION ALL SELECT 2 FROM dual --";
Assert.assertFalse(provider.checkValid(sql));
sql = "SELECT a from t where c=1 UNION ALL SELECT 2 FROM dual --";
Assert.assertFalse(provider.checkValid(sql));
}
}